NVD

Id
392  
Name
CVE-2008-0414  
Description
Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-02-08  
Modified Date
2013-09-01  
Seq
2008-0414  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
2608 392 CVE-2008-0414 http://browser.netscape.com/releasenotes/  View
2609 392 CVE-2008-0414 SUSE-SA:2008:008  View
2610 392 CVE-2008-0414 238492  View
2611 392 CVE-2008-0414 http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html  View
2612 392 CVE-2008-0414 http://wiki.rpath.com/Advisories:rPSA-2008-0051  View
2613 392 CVE-2008-0414 DSA-1484  View
2614 392 CVE-2008-0414 DSA-1485  View
2615 392 CVE-2008-0414 DSA-1489  View
2616 392 CVE-2008-0414 DSA-1506  View
2617 392 CVE-2008-0414 GLSA-200805-18  View
2618 392 CVE-2008-0414 MDVSA-2008:048  View
2619 392 CVE-2008-0414 http://www.mozilla.org/security/announce/2008/mfsa2008-02.html  View
2620 392 CVE-2008-0414 20080209 rPSA-2008-0051-1 firefox  View
2621 392 CVE-2008-0414 20080212 FLEA-2008-0001-1 firefox  View
2622 392 CVE-2008-0414 27683  View
2623 392 CVE-2008-0414 1019330  View
2624 392 CVE-2008-0414 USN-576-1  View
2625 392 CVE-2008-0414 ADV-2008-0453  View
2626 392 CVE-2008-0414 ADV-2008-0627  View
2627 392 CVE-2008-0414 ADV-2008-1793  View
2628 392 CVE-2008-0414 https://bugzilla.mozilla.org/buglist.cgi?bug_id=404451,408034,404391,405299  View
2629 392 CVE-2008-0414 FEDORA-2008-1435  View
2630 392 CVE-2008-0414 FEDORA-2008-1459  View
2631 392 CVE-2008-0414 FEDORA-2008-1535  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45763 JVNDB-2008-001073 Mozilla Firefox/SeaMonkey における任意のファイルをアップロードされる脆弱性 Mozilla Firefox/SeaMonkey には、ファイル入力フィールドの移動する label タグによって、任意のファイルをアップロードされる脆弱性が存在します。 CVE-2008-0414 30527 CVE-2008-0414 392 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001073.html 2008-02-07 2008-06-23 View