CVE-2008-1235

Published: Mar 27, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."

Affected (105)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

105 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.12
Mozilla Firefox	Version 0.1
Mozilla Firefox	Version 0.2
Mozilla Firefox	Version 0.4
Mozilla Firefox	Version 0.5
Mozilla Firefox	Version 0.6.1
Mozilla Firefox	Version 0.6
Mozilla Firefox	Version 0.7.1
Mozilla Firefox	Version 0.7
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.0 preview_release
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0
Mozilla Seamonkey	Up to 1.1.8
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 alpha
Mozilla Seamonkey	Version 1.0 beta
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1.4
Mozilla Seamonkey	Version 1.1.5
Mozilla Seamonkey	Version 1.1.6
Mozilla Seamonkey	Version 1.1.7
Mozilla Seamonkey	Version 1.1
Mozilla Seamonkey	Version 1.1 alpha
Mozilla Seamonkey	Version 1.1 beta
Mozilla Thunderbird	Up to 2.0.0.12
Mozilla Thunderbird	Version 0.1
Mozilla Thunderbird	Version 0.2
Mozilla Thunderbird	Version 0.3
Mozilla Thunderbird	Version 0.4
Mozilla Thunderbird	Version 0.5
Mozilla Thunderbird	Version 0.6
Mozilla Thunderbird	Version 0.7
Mozilla Thunderbird	Version 0.8
Mozilla Thunderbird	Version 0.9
Mozilla Thunderbird	Version 1.0.2
Mozilla Thunderbird	Version 1.0.4
Mozilla Thunderbird	Version 1.0.5
Mozilla Thunderbird	Version 1.0.6
Mozilla Thunderbird	Version 1.0.7
Mozilla Thunderbird	Version 1.0.8
Mozilla Thunderbird	Version 1.0
Mozilla Thunderbird	Version 1.5.0.10
Mozilla Thunderbird	Version 1.5.0.12
Mozilla Thunderbird	Version 1.5.0.13
Mozilla Thunderbird	Version 1.5.0.14
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.0.5
Mozilla Thunderbird	Version 1.5.0.7
Mozilla Thunderbird	Version 1.5.0.8
Mozilla Thunderbird	Version 1.5.0.9
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 2.0.0.0
Mozilla Thunderbird	Version 2.0.0.4
Mozilla Thunderbird	Version 2.0.0.5
Mozilla Thunderbird	Version 2.0.0.6
Mozilla Thunderbird	Version 2.0.0.9

References (102)

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2008-0208.html

Source: secalert@redhat.com

http://secunia.com/advisories/29391

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29526

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29539

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29541

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29547

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29548

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29550

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29558

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29560

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29607

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29616

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29645

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30016

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30094

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30105

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30192

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30327

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30370

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30620

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/31043

Source: secalert@redhat.com

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1532

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1534

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1535

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1574

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/466521

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:080

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:155

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2008/mfsa2008-14.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-0207.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0209.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/490196/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/28448

Source: secalert@redhat.com

http://www.securitytracker.com/id?1019694

Source: secalert@redhat.com

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-592-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-605-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA08-087A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2008/0998/references

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2008/0999/references

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2008/1793/references

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2008/2091/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/41457

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html