CVE-2008-5505

Published: Dec 17, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies.

Affected (5)

Products: Mozilla: Firefox

Mozilla

1 product

Firefox

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 3.0.4
Mozilla Firefox	Version 3.0.1
Mozilla Firefox	Version 3.0.2
Mozilla Firefox	Version 3.0.3
Mozilla Firefox	Version 3.0

Related CWEs

CWE-264

References (30)

http://secunia.com/advisories/33188

Source: secalert@redhat.com

http://secunia.com/advisories/33203

Source: secalert@redhat.com

http://secunia.com/advisories/33216

Source: secalert@redhat.com

http://secunia.com/advisories/34501

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:245

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2008/mfsa2008-63.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-1036.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/32882

Source: secalert@redhat.com

http://www.securitytracker.com/id?1021428

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0977

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=295994

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/47411

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10443

Source: secalert@redhat.com

https://usn.ubuntu.com/690-1/

Source: secalert@redhat.com

http://secunia.com/advisories/33188