NVD

Id
3917  
Name
CVE-2008-4059  
Description
The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-24  
Modified Date
2013-08-25  
Seq
2008-4059  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24705 3917 CVE-2008-4059 http://download.novell.com/Download?buildid=WZXONb-tqBw~  View
24706 3917 CVE-2008-4059 SUSE-SA:2008:050  View
24707 3917 CVE-2008-4059 oval:org.mitre.oval:def:9529  View
24708 3917 CVE-2008-4059 SSA:2008-269-02  View
24709 3917 CVE-2008-4059 SSA:2008-269-01  View
24710 3917 CVE-2008-4059 SSA:2008-270-01  View
24711 3917 CVE-2008-4059 256408  View
24712 3917 CVE-2008-4059 DSA-1649  View
24713 3917 CVE-2008-4059 DSA-1669  View
24714 3917 CVE-2008-4059 DSA-1696  View
24715 3917 CVE-2008-4059 DSA-1697  View
24716 3917 CVE-2008-4059 MDVSA-2008:205  View
24717 3917 CVE-2008-4059 MDVSA-2008:206  View
24718 3917 CVE-2008-4059 http://www.mozilla.org/security/announce/2008/mfsa2008-41.html  View
24719 3917 CVE-2008-4059 RHSA-2008:0882  View
24720 3917 CVE-2008-4059 RHSA-2008:0908  View
24721 3917 CVE-2008-4059 31346  View
24722 3917 CVE-2008-4059 1020915  View
24723 3917 CVE-2008-4059 USN-645-1  View
24724 3917 CVE-2008-4059 USN-645-2  View
24725 3917 CVE-2008-4059 USN-647-1  View
24726 3917 CVE-2008-4059 ADV-2008-2661  View
24727 3917 CVE-2008-4059 ADV-2009-0977  View
24728 3917 CVE-2008-4059 firefox2-xpcnativewrappers-code-execution(45352)  View
24729 3917 CVE-2008-4059 https://bugzilla.mozilla.org/show_bug.cgi?id=419848  View
24730 3917 CVE-2008-4059 FEDORA-2008-8401  View
24731 3917 CVE-2008-4059 FEDORA-2008-8429  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46436 JVNDB-2008-001746 Mozilla Firefox の XPConnect コンポーネントにおける任意のコードを実行される脆弱性 Mozilla Firefox の XPConnect コンポーネントには、SCRIPT 要素の処理に不備があるため、クローム特権で任意のコードを実行される脆弱性が存在します。 CVE-2008-4059 34172 CVE-2008-4059 3917 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001746.html 2008-09-23 2009-04-28 View