CVE-2008-2806

Published: Jul 7, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect.

Affected (36)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.13
Mozilla Firefox	Version 2.0.0.14
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 2.0 beta_1
Mozilla Firefox	Version 2.0 rc2
Mozilla Firefox	Version 2.0 rc3
Mozilla Firefox	Version 2.0_.10
Mozilla Firefox	Version 2.0_.1
Mozilla Firefox	Version 2.0_.4
Mozilla Firefox	Version 2.0_.5
Mozilla Firefox	Version 2.0_.6
Mozilla Firefox	Version 2.0_.7
Mozilla Firefox	Version 2.0_.9
Mozilla Firefox	Version 2.0_8
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1.4
Mozilla Seamonkey	Version 1.1.5
Mozilla Seamonkey	Version 1.1.6
Mozilla Seamonkey	Version 1.1.7
Mozilla Seamonkey	Version 1.1.8
Mozilla Seamonkey	Version 1.1.9
Mozilla Seamonkey	Version 1.1 beta
Mozilla Thunderbird	Version 2.0_.12
Mozilla Thunderbird	Version 2.0_.13
Mozilla Thunderbird	Version 2.0_.14
Mozilla Thunderbird	Version 2.0_.4
Mozilla Thunderbird	Version 2.0_.5
Mozilla Thunderbird	Version 2.0_.6
Mozilla Thunderbird	Version 2.0_.9
Mozilla Thunderbird	Version 2.0_8

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (44)

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html

Source: secalert@redhat.com

http://secunia.com/advisories/30898

Source: secalert@redhat.com

http://secunia.com/advisories/30911

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/31005

Source: secalert@redhat.com

http://secunia.com/advisories/31008

Source: secalert@redhat.com

http://secunia.com/advisories/31021

Source: secalert@redhat.com

http://secunia.com/advisories/31023

Source: secalert@redhat.com

http://secunia.com/advisories/31076

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2008-0216

Source: secalert@redhat.com

http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2008/mfsa2008-28.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/494080/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/30038

Source: secalert@redhat.com

http://www.securitytracker.com/id?1020419

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-619-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1993/references

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=408329

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2646

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30898

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30911

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/31005

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31008

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31021

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31023

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31076

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/Advisories:rPSA-2008-0216

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2008/mfsa2008-28.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/494080/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/30038

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1020419

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-619-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/1993/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=408329

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-2646

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.