Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1234
HistoryMar 27, 2008 - 12:00 a.m.

CVE-2008-1234

2008-03-2700:00:00
ubuntu.com
ubuntu.com
32

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.007

Percentile

79.9%

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before
2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows
remote attackers to inject arbitrary web script or HTML via event handlers,
aka “Universal XSS using event handlers.”

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.15~prepatch080323a-0ubuntu1UNKNOWN
ubuntu6.10noarchfirefox< 2.0.0.13+0nobinonly-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchfirefox< 2.0.0.13+0nobinonly-0ubuntu0.7.4UNKNOWN
ubuntu7.10noarchfirefox< 2.0.0.13+1nobinonly-0ubuntu0.7.10UNKNOWN
ubuntu8.04noarchfirefox< 2.0.0.13+1nobinonly-0ubuntu1UNKNOWN
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13+1.5.0.15~prepatch080417a-0ubuntu0.6.06.1UNKNOWN
ubuntu7.04noarchmozilla-thunderbird< 1.5.0.13+1.5.0.15~prepatch080417a-0ubuntu0.7.04.1UNKNOWN
ubuntu8.04noarchseamonkey< 1.1.9+nobinonly-0ubuntu1UNKNOWN
ubuntu8.10noarchseamonkey< 1.1.9+nobinonly-0ubuntu1UNKNOWN
ubuntu7.10noarchthunderbird< 2.0.0.14+nobinonly-0ubuntu0.7.10.0UNKNOWN
Rows per page:
1-10 of 151

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.007

Percentile

79.9%