NVD

Id
3698  
Name
CVE-2008-3836  
Description
feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the (1) elem.doCommand, (2) elem.dispatchEvent, (3) _setTitleText, (4) _setTitleImage, and (5) _initSubscriptionUI functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-24  
Modified Date
2012-10-29  
Seq
2008-3836  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23399 3698 CVE-2008-3836 http://download.novell.com/Download?buildid=WZXONb-tqBw~  View
23400 3698 CVE-2008-3836 SUSE-SA:2008:050  View
23401 3698 CVE-2008-3836 SSA:2008-269-01  View
23402 3698 CVE-2008-3836 256408  View
23403 3698 CVE-2008-3836 DSA-1649  View
23404 3698 CVE-2008-3836 DSA-1669  View
23405 3698 CVE-2008-3836 DSA-1697  View
23406 3698 CVE-2008-3836 MDVSA-2008:205  View
23407 3698 CVE-2008-3836 http://www.mozilla.org/security/announce/2008/mfsa2008-39.html  View
23408 3698 CVE-2008-3836 31346  View
23409 3698 CVE-2008-3836 1020914  View
23410 3698 CVE-2008-3836 USN-645-1  View
23411 3698 CVE-2008-3836 USN-645-2  View
23412 3698 CVE-2008-3836 ADV-2008-2661  View
23413 3698 CVE-2008-3836 ADV-2009-0977  View
23414 3698 CVE-2008-3836 firefox-feedwriter-code-execution(45350)  View
23415 3698 CVE-2008-3836 https://bugzilla.mozilla.org/show_bug.cgi?id=360529  View
23416 3698 CVE-2008-3836 https://bugzilla.mozilla.org/show_bug.cgi?id=430658  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46443 JVNDB-2008-001753 Mozilla Firefox の feedWriter における任意のスクリプトを実行される脆弱性 Mozilla Firefox の feedWriter には、フィードプレビューの elem.doCommand、elem.dispatchEvent、_setTitleText、_setTitleImage、_initSubscriptionUI 関数に関連した処理に不備があるため、クローム特権で任意のスクリプトを実行される脆弱性が存在します。 CVE-2008-3836 33949 CVE-2008-3836 3698 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001753.html 2008-09-23 2009-04-28 View