NVD

Id
3699  
Name
CVE-2008-3837  
Description
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-24  
Modified Date
2012-10-29  
Seq
2008-3837  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23417 3699 CVE-2008-3837 http://download.novell.com/Download?buildid=WZXONb-tqBw~  View
23418 3699 CVE-2008-3837 SUSE-SA:2008:050  View
23419 3699 CVE-2008-3837 oval:org.mitre.oval:def:9950  View
23420 3699 CVE-2008-3837 SSA:2008-269-02  View
23421 3699 CVE-2008-3837 SSA:2008-269-01  View
23422 3699 CVE-2008-3837 256408  View
23423 3699 CVE-2008-3837 DSA-1649  View
23424 3699 CVE-2008-3837 DSA-1669  View
23425 3699 CVE-2008-3837 DSA-1697  View
23426 3699 CVE-2008-3837 MDVSA-2008:205  View
23427 3699 CVE-2008-3837 http://www.mozilla.org/security/announce/2008/mfsa2008-40.html  View
23428 3699 CVE-2008-3837 RHSA-2008:0879  View
23429 3699 CVE-2008-3837 RHSA-2008:0882  View
23430 3699 CVE-2008-3837 31346  View
23431 3699 CVE-2008-3837 1020922  View
23432 3699 CVE-2008-3837 USN-645-1  View
23433 3699 CVE-2008-3837 USN-645-2  View
23434 3699 CVE-2008-3837 ADV-2008-2661  View
23435 3699 CVE-2008-3837 ADV-2009-0977  View
23436 3699 CVE-2008-3837 firefox-draganddrop-weak-security(45348)  View
23437 3699 CVE-2008-3837 https://bugzilla.mozilla.org/show_bug.cgi?id=329385  View
23438 3699 CVE-2008-3837 FEDORA-2008-8425  View
23439 3699 CVE-2008-3837 FEDORA-2008-8401  View
23440 3699 CVE-2008-3837 FEDORA-2008-8429  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46449 JVNDB-2008-001759 Mozilla Firefox/SeaMonkey における onmousedown アクションの処理に関する脆弱性 Mozilla Firefox/SeaMonkey には、window.moveBy を呼び出す onmousedown アクションの処理に不備があるため、マウスをクリックしている間にウインドウを移動され、強制的にファイルをダウンロードさせられる、またはその他のドラッグ＆ドロップ操作を実行させられる脆弱性が存在します。 CVE-2008-3837 33950 CVE-2008-3837 3699 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001759.html 2008-09-23 2009-04-28 View