Firefox vulnerabilities

2009-02-1100:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

76.8%

JSON

Releases

Ubuntu 6.06

Packages

firefox -

Details

Kojima Hajime discovered that Firefox did not properly handle an escaped null
character. An attacker may be able to exploit this flaw to bypass script
sanitization. (CVE-2008-5510)

Wladimir Palant discovered that Firefox did not restrict access to cookies in
HTTP response headers. If a user were tricked into opening a malicious web
page, a remote attacker could view sensitive information. (CVE-2009-0357)

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN
Ubuntu6.06noarchfirefox< dbg-1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN
Ubuntu6.06noarchfirefox< dev-1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN
Ubuntu6.06noarchfirefox< dom-inspector-1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN
Ubuntu6.06noarchfirefox< gnome-support-1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN
Ubuntu6.06noarchlibnspr-dev< 2:1.firefox1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN
Ubuntu6.06noarchlibnspr4< 2:1.firefox1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN
Ubuntu6.06noarchlibnss-dev< 2:1.firefox1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN
Ubuntu6.06noarchlibnss3< 2:1.firefox1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN
Ubuntu	6.06	noarch	firefox	< dbg-1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN
Ubuntu	6.06	noarch	firefox	< dev-1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN
Ubuntu	6.06	noarch	firefox	< dom-inspector-1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN
Ubuntu	6.06	noarch	firefox	< gnome-support-1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN
Ubuntu	6.06	noarch	libnspr-dev	< 2:1.firefox1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN
Ubuntu	6.06	noarch	libnspr4	< 2:1.firefox1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN
Ubuntu	6.06	noarch	libnss-dev	< 2:1.firefox1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN
Ubuntu	6.06	noarch	libnss3	< 2:1.firefox1.5.dfsg+1.5.0.15~prepatch080614j-0ubuntu1	UNKNOWN