CVE-2008-1234

Published: Mar 27, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."

Affected (3)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.12
Mozilla Seamonkey	Up to 1.1.8
Mozilla Thunderbird	Up to 2.0.0.12

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (102)

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2008-0208.html

Source: secalert@redhat.com

http://secunia.com/advisories/29391

Source: secalert@redhat.com

http://secunia.com/advisories/29526

Source: secalert@redhat.com

http://secunia.com/advisories/29539

Source: secalert@redhat.com

http://secunia.com/advisories/29541

Source: secalert@redhat.com

http://secunia.com/advisories/29547

Source: secalert@redhat.com

http://secunia.com/advisories/29548

Source: secalert@redhat.com

http://secunia.com/advisories/29550

Source: secalert@redhat.com

http://secunia.com/advisories/29558

Source: secalert@redhat.com

http://secunia.com/advisories/29560

Source: secalert@redhat.com

http://secunia.com/advisories/29607

Source: secalert@redhat.com

http://secunia.com/advisories/29616

Source: secalert@redhat.com

http://secunia.com/advisories/29645

Source: secalert@redhat.com

http://secunia.com/advisories/30016

Source: secalert@redhat.com

http://secunia.com/advisories/30094

Source: secalert@redhat.com

http://secunia.com/advisories/30105

Source: secalert@redhat.com

http://secunia.com/advisories/30192

Source: secalert@redhat.com

http://secunia.com/advisories/30327

Source: secalert@redhat.com

http://secunia.com/advisories/30370

Source: secalert@redhat.com

http://secunia.com/advisories/30620

Source: secalert@redhat.com

http://secunia.com/advisories/31043

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1532

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1534

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1535

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1574

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/466521

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:080

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:155

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2008/mfsa2008-14.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0207.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0209.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/490196/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/28448

Source: secalert@redhat.com

http://www.securitytracker.com/id?1019694

Source: secalert@redhat.com

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-592-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-605-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA08-087A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2008/0998/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0999/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1793/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2091/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/41455

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9551

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html