NVD

Id
3916  
Name
CVE-2008-4058  
Description
The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-24  
Modified Date
2013-07-27  
Seq
2008-4058  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24675 3916 CVE-2008-4058 http://download.novell.com/Download?buildid=WZXONb-tqBw~  View
24676 3916 CVE-2008-4058 SUSE-SA:2008:050  View
24677 3916 CVE-2008-4058 oval:org.mitre.oval:def:9679  View
24678 3916 CVE-2008-4058 SSA:2008-269-02  View
24679 3916 CVE-2008-4058 SSA:2008-269-01  View
24680 3916 CVE-2008-4058 SSA:2008-270-01  View
24681 3916 CVE-2008-4058 256408  View
24682 3916 CVE-2008-4058 DSA-1649  View
24683 3916 CVE-2008-4058 DSA-1669  View
24684 3916 CVE-2008-4058 DSA-1696  View
24685 3916 CVE-2008-4058 DSA-1697  View
24686 3916 CVE-2008-4058 MDVSA-2008:205  View
24687 3916 CVE-2008-4058 MDVSA-2008:206  View
24688 3916 CVE-2008-4058 http://www.mozilla.org/security/announce/2008/mfsa2008-41.html  View
24689 3916 CVE-2008-4058 RHSA-2008:0879  View
24690 3916 CVE-2008-4058 RHSA-2008:0882  View
24691 3916 CVE-2008-4058 RHSA-2008:0908  View
24692 3916 CVE-2008-4058 31346  View
24693 3916 CVE-2008-4058 1020915  View
24694 3916 CVE-2008-4058 USN-645-1  View
24695 3916 CVE-2008-4058 USN-645-2  View
24696 3916 CVE-2008-4058 USN-647-1  View
24697 3916 CVE-2008-4058 ADV-2008-2661  View
24698 3916 CVE-2008-4058 ADV-2009-0977  View
24699 3916 CVE-2008-4058 firefox3-xpcnativewrappers-code-execution(45349)  View
24700 3916 CVE-2008-4058 https://bugzilla.mozilla.org/show_bug.cgi?id=444075  View
24701 3916 CVE-2008-4058 https://bugzilla.mozilla.org/show_bug.cgi?id=444077  View
24702 3916 CVE-2008-4058 FEDORA-2008-8425  View
24703 3916 CVE-2008-4058 FEDORA-2008-8401  View
24704 3916 CVE-2008-4058 FEDORA-2008-8429  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46435 JVNDB-2008-001745 複数の Mozilla 製品 の XPConnect コンポーネントにおける任意のコードを実行される脆弱性 複数の Mozilla 製品の XPConnect コンポーネントには、クローム XBL およびクローム JS の処理に不備があるため、クローム特権で任意のコードを実行される脆弱性が存在します。 CVE-2008-4058 34171 CVE-2008-4058 3916 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001745.html 2008-09-23 2009-04-28 View