NVD

Id
1199  
Name
CVE-2008-1240  
Description
LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before sending them to the Java plugin, which allows remote attackers to access arbitrary ports on the local machine. NOTE: this is closely related to CVE-2008-1195.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-03-27  
Modified Date
2011-03-07  
Seq
2008-1240  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7639 1199 CVE-2008-1240 SUSE-SA:2008:019  View
7640 1199 CVE-2008-1240 238492  View
7641 1199 CVE-2008-1240 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128  View
7642 1199 CVE-2008-1240 DSA-1532  View
7643 1199 CVE-2008-1240 DSA-1534  View
7644 1199 CVE-2008-1240 DSA-1535  View
7645 1199 CVE-2008-1240 GLSA-200805-18  View
7646 1199 CVE-2008-1240 MDVSA-2008:080  View
7647 1199 CVE-2008-1240 http://www.mozilla.org/security/announce/2008/mfsa2008-18.html  View
7648 1199 CVE-2008-1240 20080327 rPSA-2008-0128-1 firefox  View
7649 1199 CVE-2008-1240 28448  View
7650 1199 CVE-2008-1240 USN-592-1  View
7651 1199 CVE-2008-1240 TA08-087A  View
7652 1199 CVE-2008-1240 ADV-2008-0998  View
7653 1199 CVE-2008-1240 ADV-2008-1793  View
7654 1199 CVE-2008-1240 mozilla-liveconnect-unauthorized-access(41458)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45927 JVNDB-2008-001237 複数の Mozilla 製品 の LiveConnect における任意のポートにアクセスされる脆弱性 複数の Mozilla 製品における LiveConnect には、Java プラグ委任に送信する前、jar: URI の接続元を適切に解析しないため、任意のポートへアクセスされる脆弱性が存在します。 CVE-2008-1240 31353 CVE-2008-1240 1199 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001237.html 2008-03-25 2008-06-23 View