CVE-2008-0414

Published: Feb 8, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."

Affected (2)

Products: Mozilla: Firefox, Seamonkey

Mozilla

2 products

Firefox

Seamonkey

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.11
Mozilla Seamonkey	Up to 1.1.7

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (78)

http://browser.netscape.com/releasenotes/

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html

Source: secalert@redhat.com

http://secunia.com/advisories/28758

Source: secalert@redhat.com

http://secunia.com/advisories/28815

Source: secalert@redhat.com

http://secunia.com/advisories/28839

Source: secalert@redhat.com

http://secunia.com/advisories/28864

Source: secalert@redhat.com

http://secunia.com/advisories/28865

Source: secalert@redhat.com

http://secunia.com/advisories/28877

Source: secalert@redhat.com

http://secunia.com/advisories/28879

Source: secalert@redhat.com

http://secunia.com/advisories/28924

Source: secalert@redhat.com

http://secunia.com/advisories/28939

Source: secalert@redhat.com

http://secunia.com/advisories/28958

Source: secalert@redhat.com

http://secunia.com/advisories/29049

Source: secalert@redhat.com

http://secunia.com/advisories/29086

Source: secalert@redhat.com

http://secunia.com/advisories/29567

Source: secalert@redhat.com

http://secunia.com/advisories/30327

Source: secalert@redhat.com

http://secunia.com/advisories/30620

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1

Source: secalert@redhat.com

http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2008-0051

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1484

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1485

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1489

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1506

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:048

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2008/mfsa2008-02.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/487826/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/488002/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/27683

Source: secalert@redhat.com

http://www.securitytracker.com/id?1019330

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-576-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0453/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0627/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1793/references

Source: secalert@redhat.com

https://bugzilla.mozilla.org/buglist.cgi?bug_id=404451%2C408034%2C404391%2C405299

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html

Source: secalert@redhat.com

http://browser.netscape.com/releasenotes/