Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-2933
HistoryJul 17, 2008 - 1:41 p.m.

CVE-2008-2933

2008-07-1713:41:00
CWE-20
[email protected]
web.nvd.nist.gov
5

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

High

EPSS

0.645

Percentile

97.9%

JSON

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets ‘|’ (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely handled by a vector application, as exploited in conjunction with CVE-2008-2540. NOTE: this issue exists because of an insufficient fix for CVE-2005-2267.

Affected configurations

Nvd
Node
mozillafirefoxRange≤2.0.0.15
OR
mozillafirefoxMatch0.8
OR
mozillafirefoxMatch0.9
OR
mozillafirefoxMatch0.9.1
OR
mozillafirefoxMatch0.9.2
OR
mozillafirefoxMatch0.9.3
OR
mozillafirefoxMatch0.10
OR
mozillafirefoxMatch0.10.1
OR
mozillafirefoxMatch1.0
OR
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillafirefoxMatch1.0.3
OR
mozillafirefoxMatch1.0.4
OR
mozillafirefoxMatch1.0.5
OR
mozillafirefoxMatch1.0.6
OR
mozillafirefoxMatch1.0.7
OR
mozillafirefoxMatch1.0.8
OR
mozillafirefoxMatch1.5
OR
mozillafirefoxMatch1.5.0.1
OR
mozillafirefoxMatch1.5.0.2
OR
mozillafirefoxMatch1.5.0.3
OR
mozillafirefoxMatch1.5.0.4
OR
mozillafirefoxMatch1.5.0.5
OR
mozillafirefoxMatch1.5.0.6
OR
mozillafirefoxMatch1.5.0.7
OR
mozillafirefoxMatch1.5.0.8
OR
mozillafirefoxMatch1.5.0.9
OR
mozillafirefoxMatch1.5.0.10
OR
mozillafirefoxMatch1.5.0.11
OR
mozillafirefoxMatch1.5.0.12
OR
mozillafirefoxMatch1.5.1
OR
mozillafirefoxMatch1.5.2
OR
mozillafirefoxMatch1.5.3
OR
mozillafirefoxMatch1.5.4
OR
mozillafirefoxMatch1.5.5
OR
mozillafirefoxMatch1.5.6
OR
mozillafirefoxMatch1.5.7
OR
mozillafirefoxMatch1.5.8
OR
mozillafirefoxMatch1.8
OR
mozillafirefoxMatch2.0
OR
mozillafirefoxMatch2.0.0.1
OR
mozillafirefoxMatch2.0.0.2
OR
mozillafirefoxMatch2.0.0.3
OR
mozillafirefoxMatch2.0.0.4
OR
mozillafirefoxMatch2.0.0.5
OR
mozillafirefoxMatch2.0.0.6
OR
mozillafirefoxMatch2.0.0.7
OR
mozillafirefoxMatch2.0.0.8
OR
mozillafirefoxMatch2.0.0.9
OR
mozillafirefoxMatch2.0.0.10
OR
mozillafirefoxMatch2.0.0.11
OR
mozillafirefoxMatch2.0.0.12
OR
mozillafirefoxMatch2.0.0.13
OR
mozillafirefoxMatch2.0.0.14
OR
mozillafirefoxMatch2.0_.1
OR
mozillafirefoxMatch2.0_.4
OR
mozillafirefoxMatch2.0_.5
OR
mozillafirefoxMatch2.0_.6
OR
mozillafirefoxMatch2.0_.7
OR
mozillafirefoxMatch2.0_.9
OR
mozillafirefoxMatch2.0_.10
OR
mozillafirefoxMatch2.0_8
OR
mozillafirefoxMatch3.0

References

Related

prion 3
cve 4
ubuntucve 3
cvelist 4
cert 2
nvd 3
nessus 39
checkpoint_advisories 2
openvas 82
securityvulns 5
seebug 1
veracode 1
mozilla 1
fedora 23
debian 4
oraclelinux 2
ubuntu 4
redhat 4
centos 5
osv 3
threatpost 1
mskb 1
freebsd 1
suse 1
prion
prion
Design/Logic Flaw
2008-07-17 13:41:00
Privilege escalation
2008-06-03 15:32:00
Design/Logic Flaw
2008-07-17 13:41:00
cve
cve
CVE-2008-2933
2008-07-17 13:41:00
CVE-2005-2267
2005-07-13 04:00:00
CVE-2008-2540
2008-06-03 15:32:00
ubuntucve
ubuntucve
CVE-2008-2933
2008-07-17 00:00:00
CVE-2005-2267
2005-07-13 00:00:00
CVE-2008-3198
2008-07-17 00:00:00
cvelist
cvelist
CVE-2008-2933
2008-07-17 10:00:00
CVE-2005-2267
2005-07-13 04:00:00
CVE-2008-2540
2008-06-03 15:00:00
cert
cert
Mozilla Firefox insecurely handles content from external applications
2005-08-02 00:00:00
Mozilla Firefox command line URI handling vulnerability
2008-07-16 00:00:00
nvd
nvd
CVE-2005-2267
2005-07-13 04:00:00
CVE-2008-2540
2008-06-03 15:32:00
CVE-2008-3198
2008-07-17 13:41:00
nessus
nessus
MS09-015: Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)
2009-04-15 00:00:00
RHEL 4 : firefox (RHSA-2008:0598)
2008-07-17 00:00:00
Ubuntu 6.06 LTS / 7.04 / 7.10 : firefox vulnerabilities (USN-623-1)
2008-07-18 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Apple Safari on Windows Platform Remote Code Execution Vulnerability (MS09-015)
2008-06-02 00:00:00
Apple Safari for Windows and Internet Explorer Combined Code Execution (CVE-2008-2540)
2010-07-13 00:00:00
openvas
openvas
Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)
2009-04-15 00:00:00
Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)
2009-04-15 00:00:00
Fedora Update for gtkmozembedmm FEDORA-2008-6491
2009-02-17 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS09-015 – Moderate Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)
2009-04-15 00:00:00
Mozilla Foundation Security Advisory 2008-35
2008-07-18 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2008-07-18 00:00:00
seebug
seebug
Mozilla Firefox URI拆分绕过安全限制漏洞
2008-07-17 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:23:56
mozilla
mozilla
Command-line URLs launch multiple tabs when Firefox not running — Mozilla
2008-07-15 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: yelp-2.20.0-11.fc8
2008-07-18 08:07:34
[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-9.fc8
2008-07-18 08:07:34
[SECURITY] Fedora 8 Update: galeon-2.0.4-4.fc8.3
2008-07-18 08:07:34
debian
debian
[SECURITY] [DSA 1614-1] New iceweasel packages fix several vulnerabilities
2008-07-23 20:07:11
[SECURITY] [DSA 779-2] New Mozilla Firefox packages fix several vulnerabilities
2005-09-01 14:06:47
[SECURITY] [DSA 779-1] New Mozilla Firefox packages fix several vulnerabilities
2005-08-20 13:35:34
oraclelinux
oraclelinux
firefox security update
2008-07-16 00:00:00
firefox security update
2008-07-16 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2008-07-17 00:00:00
Devhelp, Epiphany, Midbrowser and Yelp update
2008-08-04 00:00:00
Firefox and xulrunner vulnerabilities
2008-07-28 00:00:00
redhat
redhat
(RHSA-2008:0598) Critical: firefox security update
2008-07-16 00:00:00
(RHSA-2008:0597) Critical: firefox security update
2008-07-16 00:00:00
(RHSA-2005:587) mozilla security update
2005-07-22 00:00:00
centos
centos
firefox security update
2008-07-17 02:50:07
devhelp, firefox, xulrunner security update
2008-07-17 02:39:25
devhelp, mozilla security update
2005-07-22 15:23:45
osv
osv
iceweasel - several vulnerabilities
2008-07-23 00:00:00
mozilla-firefox - several
2005-08-20 00:00:00
mozilla-firefox - several
2005-08-20 00:00:00
threatpost
threatpost
Microsoft plugs gaping holes in IE, Excel, Windows
2009-04-14 17:56:32
mskb
mskb
MS09-014: Cumulative security update for Internet Explorer
2012-07-18 16:19:51
freebsd
freebsd
firefox & mozilla -- multiple vulnerabilities
2005-07-12 00:00:00
suse
suse
information leak in mozilla,MozillaFirefox,epiphany,galeon
2005-08-11 15:28:02

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

High

EPSS

0.645

Percentile

97.9%

JSON
Related for NVD:CVE-2008-2933
prion3cve4ubuntucve3cvelist4cert2nvd3nessus39checkpoint_advisories2openvas82securityvulns5seebug1veracode1mozilla1fedora23debian4oraclelinux2ubuntu4redhat4centos5osv3threatpost1mskb1freebsd1suse1