NVD

Id
2697  
Name
CVE-2008-2803  
Description
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-07  
Modified Date
2012-11-26  
Seq
2008-2803  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17058 2697 CVE-2008-2803 SUSE-SA:2008:034  View
17059 2697 CVE-2008-2803 oval:org.mitre.oval:def:10747  View
17060 2697 CVE-2008-2803 RHSA-2008:0616  View
17061 2697 CVE-2008-2803 GLSA-200808-03  View
17062 2697 CVE-2008-2803 SSA:2008-191-03  View
17063 2697 CVE-2008-2803 SSA:2008-191  View
17064 2697 CVE-2008-2803 SSA:2008-210-05  View
17065 2697 CVE-2008-2803 256408  View
17066 2697 CVE-2008-2803 http://wiki.rpath.com/Advisories:rPSA-2008-0216  View
17067 2697 CVE-2008-2803 DSA-1607  View
17068 2697 CVE-2008-2803 DSA-1615  View
17069 2697 CVE-2008-2803 DSA-1621  View
17070 2697 CVE-2008-2803 DSA-1697  View
17071 2697 CVE-2008-2803 MDVSA-2008:136  View
17072 2697 CVE-2008-2803 MDVSA-2008:155  View
17073 2697 CVE-2008-2803 http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15  View
17074 2697 CVE-2008-2803 http://www.mozilla.org/security/announce/2008/mfsa2008-25.html  View
17075 2697 CVE-2008-2803 RHSA-2008:0547  View
17076 2697 CVE-2008-2803 RHSA-2008:0549  View
17077 2697 CVE-2008-2803 RHSA-2008:0569  View
17078 2697 CVE-2008-2803 20080708 rPSA-2008-0216-1 firefox  View
17079 2697 CVE-2008-2803 30038  View
17080 2697 CVE-2008-2803 1020419  View
17081 2697 CVE-2008-2803 USN-619-1  View
17082 2697 CVE-2008-2803 USN-629-1  View
17083 2697 CVE-2008-2803 ADV-2008-1993  View
17084 2697 CVE-2008-2803 ADV-2009-0977  View
17085 2697 CVE-2008-2803 https://bugzilla.mozilla.org/show_bug.cgi?id=418356  View
17086 2697 CVE-2008-2803 https://issues.rpath.com/browse/RPL-2646  View
17087 2697 CVE-2008-2803 FEDORA-2008-6737  View
17088 2697 CVE-2008-2803 FEDORA-2008-6706  View
17089 2697 CVE-2008-2803 FEDORA-2008-6127  View
17090 2697 CVE-2008-2803 FEDORA-2008-6193  View
17091 2697 CVE-2008-2803 FEDORA-2008-6196  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46181 JVNDB-2008-001491 複数の Mozilla 製品の mozIJSSubScriptLoader.LoadScript() 関数における任意のコードが実行される脆弱性 複数の Mozilla の 製品には mozIJSSubScriptLoader.LoadScript() 関数において、file:URI, data:URI, chrome:URI の取り扱いに不備があり、任意のコードを実行される脆弱性が存在します。 CVE-2008-2803 32916 CVE-2008-2803 2697 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001491.html 2008-07-09 2009-04-27 View