NVD

Id
2695  
Name
CVE-2008-2801  
Description
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-07  
Modified Date
2012-11-26  
Seq
2008-2801  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
16994 2695 CVE-2008-2801 SUSE-SA:2008:034  View
16995 2695 CVE-2008-2801 oval:org.mitre.oval:def:11810  View
16996 2695 CVE-2008-2801 RHSA-2008:0616  View
16997 2695 CVE-2008-2801 GLSA-200808-03  View
16998 2695 CVE-2008-2801 SSA:2008-191-03  View
16999 2695 CVE-2008-2801 SSA:2008-191  View
17000 2695 CVE-2008-2801 256408  View
17001 2695 CVE-2008-2801 http://wiki.rpath.com/Advisories:rPSA-2008-0216  View
17002 2695 CVE-2008-2801 DSA-1607  View
17003 2695 CVE-2008-2801 DSA-1615  View
17004 2695 CVE-2008-2801 DSA-1697  View
17005 2695 CVE-2008-2801 MDVSA-2008:136  View
17006 2695 CVE-2008-2801 http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15  View
17007 2695 CVE-2008-2801 http://www.mozilla.org/security/announce/2008/mfsa2008-23.html  View
17008 2695 CVE-2008-2801 RHSA-2008:0547  View
17009 2695 CVE-2008-2801 RHSA-2008:0549  View
17010 2695 CVE-2008-2801 RHSA-2008:0569  View
17011 2695 CVE-2008-2801 20080708 rPSA-2008-0216-1 firefox  View
17012 2695 CVE-2008-2801 30038  View
17013 2695 CVE-2008-2801 1020419  View
17014 2695 CVE-2008-2801 USN-619-1  View
17015 2695 CVE-2008-2801 ADV-2008-1993  View
17016 2695 CVE-2008-2801 ADV-2009-0977  View
17017 2695 CVE-2008-2801 https://bugzilla.mozilla.org/show_bug.cgi?id=418996  View
17018 2695 CVE-2008-2801 https://bugzilla.mozilla.org/show_bug.cgi?id=424188  View
17019 2695 CVE-2008-2801 https://bugzilla.mozilla.org/show_bug.cgi?id=424426  View
17020 2695 CVE-2008-2801 https://issues.rpath.com/browse/RPL-2646  View
17021 2695 CVE-2008-2801 FEDORA-2008-6127  View
17022 2695 CVE-2008-2801 FEDORA-2008-6193  View
17023 2695 CVE-2008-2801 FEDORA-2008-6196  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46196 JVNDB-2008-001506 Mozilla Firefox/SeaMonkey の JAR 署名処理における任意のコードを実行される脆弱性 Mozilla の Firefox および SeaMonkey には、JAR 署名の実装に不備があり、任意のコードを実行される脆弱性が存在します。 CVE-2008-2801 32914 CVE-2008-2801 2695 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001506.html 2008-07-01 2009-04-27 View