NVD

Id
2704  
Name
CVE-2008-2810  
Description
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-07  
Modified Date
2012-11-26  
Seq
2008-2810  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17241 2704 CVE-2008-2810 SUSE-SA:2008:034  View
17242 2704 CVE-2008-2810 oval:org.mitre.oval:def:9593  View
17243 2704 CVE-2008-2810 RHSA-2008:0616  View
17244 2704 CVE-2008-2810 GLSA-200808-03  View
17245 2704 CVE-2008-2810 SSA:2008-191-03  View
17246 2704 CVE-2008-2810 SSA:2008-191  View
17247 2704 CVE-2008-2810 http://wiki.rpath.com/Advisories:rPSA-2008-0216  View
17248 2704 CVE-2008-2810 DSA-1697  View
17249 2704 CVE-2008-2810 http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15  View
17250 2704 CVE-2008-2810 http://www.mozilla.org/security/announce/2008/mfsa2008-32.html  View
17251 2704 CVE-2008-2810 RHSA-2008:0547  View
17252 2704 CVE-2008-2810 RHSA-2008:0549  View
17253 2704 CVE-2008-2810 RHSA-2008:0569  View
17254 2704 CVE-2008-2810 20080708 rPSA-2008-0216-1 firefox  View
17255 2704 CVE-2008-2810 30038  View
17256 2704 CVE-2008-2810 1020419  View
17257 2704 CVE-2008-2810 USN-619-1  View
17258 2704 CVE-2008-2810 ADV-2008-1993  View
17259 2704 CVE-2008-2810 https://bugzilla.mozilla.org/show_bug.cgi?id=410156  View
17260 2704 CVE-2008-2810 https://issues.rpath.com/browse/RPL-2646  View
17261 2704 CVE-2008-2810 FEDORA-2008-6127  View
17262 2704 CVE-2008-2810 FEDORA-2008-6193  View
17263 2704 CVE-2008-2810 FEDORA-2008-6196  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46202 JVNDB-2008-001512 Mozilla Firefox/SeaMonkey におけるショートカットファイルの識別に関する同一生成元ポリシーを回避される脆弱性 Mozilla Firefox/SeaMonkey には、Windows ショートカットファイルの識別に不備があり、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2008-2810 32923 CVE-2008-2810 2704 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001512.html 2008-07-01 2008-11-21 View