CVE-2008-5504

Published: Dec 17, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.

Affected (19)

Products: Mozilla: Firefox

1 product

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.18
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.13
Mozilla Firefox	Version 2.0.0.14
Mozilla Firefox	Version 2.0.0.15
Mozilla Firefox	Version 2.0.0.16
Mozilla Firefox	Version 2.0.0.17
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0

Related CWEs

References (34)

http://secunia.com/advisories/33184

Source: secalert@redhat.com

http://secunia.com/advisories/33189

Source: secalert@redhat.com

http://secunia.com/advisories/33231

Source: secalert@redhat.com

http://secunia.com/advisories/33523

Source: secalert@redhat.com

http://secunia.com/advisories/34501

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1

Source: secalert@redhat.com

http://www.debian.org/security/2009/dsa-1707

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:244

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2008/mfsa2008-62.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-1037.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/32882

Source: secalert@redhat.com

http://www.securitytracker.com/id?1021422

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-690-2

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0977

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=453526

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/47410

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10781

Source: secalert@redhat.com

http://secunia.com/advisories/33184

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33189

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33231

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33523

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34501

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1707

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:244

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2008/mfsa2008-62.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-1037.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32882

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021422

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-690-2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0977

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=453526

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/47410

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10781

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.