NVD

Id
3918  
Name
CVE-2008-4060  
Description
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create documents that lack script-handling objects, and execute arbitrary code with chrome privileges, via vectors related to (1) the document.loadBindingDocument function and (2) XSLT.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-24  
Modified Date
2013-09-02  
Seq
2008-4060  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24732 3918 CVE-2008-4060 http://download.novell.com/Download?buildid=WZXONb-tqBw~  View
24733 3918 CVE-2008-4060 SUSE-SA:2008:050  View
24734 3918 CVE-2008-4060 oval:org.mitre.oval:def:11607  View
24735 3918 CVE-2008-4060 SSA:2008-269-02  View
24736 3918 CVE-2008-4060 SSA:2008-269-01  View
24737 3918 CVE-2008-4060 SSA:2008-270-01  View
24738 3918 CVE-2008-4060 256408  View
24739 3918 CVE-2008-4060 DSA-1649  View
24740 3918 CVE-2008-4060 DSA-1669  View
24741 3918 CVE-2008-4060 DSA-1696  View
24742 3918 CVE-2008-4060 DSA-1697  View
24743 3918 CVE-2008-4060 MDVSA-2008:205  View
24744 3918 CVE-2008-4060 MDVSA-2008:206  View
24745 3918 CVE-2008-4060 http://www.mozilla.org/security/announce/2008/mfsa2008-41.html  View
24746 3918 CVE-2008-4060 RHSA-2008:0879  View
24747 3918 CVE-2008-4060 RHSA-2008:0882  View
24748 3918 CVE-2008-4060 RHSA-2008:0908  View
24749 3918 CVE-2008-4060 31346  View
24750 3918 CVE-2008-4060 1020915  View
24751 3918 CVE-2008-4060 USN-645-1  View
24752 3918 CVE-2008-4060 USN-645-2  View
24753 3918 CVE-2008-4060 USN-647-1  View
24754 3918 CVE-2008-4060 ADV-2008-2661  View
24755 3918 CVE-2008-4060 ADV-2009-0977  View
24756 3918 CVE-2008-4060 firefox-xslt-code-execution(45353)  View
24757 3918 CVE-2008-4060 https://bugzilla.mozilla.org/show_bug.cgi?id=448548  View
24758 3918 CVE-2008-4060 https://bugzilla.mozilla.org/show_bug.cgi?id=451037  View
24759 3918 CVE-2008-4060 FEDORA-2008-8425  View
24760 3918 CVE-2008-4060 FEDORA-2008-8401  View
24761 3918 CVE-2008-4060 FEDORA-2008-8429  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46437 JVNDB-2008-001747 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品には、document.loadBindingDocument 関数および XSLT の処理に不備があるため、クローム特権で任意のコードを実行される脆弱性が存在します。 CVE-2008-4060 34173 CVE-2008-4060 3918 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001747.html 2008-09-23 2009-04-28 View