NVD

Id
5257  
Name
CVE-2008-5507  
Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-17  
Modified Date
2012-10-30  
Seq
2008-5507  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33066 5257 CVE-2008-5507 oval:org.mitre.oval:def:9376  View
33067 5257 CVE-2008-5507 http://scary.beasts.org/security/CESA-2008-011.html  View
33068 5257 CVE-2008-5507 256408  View
33069 5257 CVE-2008-5507 258748  View
33070 5257 CVE-2008-5507 DSA-1696  View
33071 5257 CVE-2008-5507 DSA-1697  View
33072 5257 CVE-2008-5507 DSA-1704  View
33073 5257 CVE-2008-5507 DSA-1707  View
33074 5257 CVE-2008-5507 MDVSA-2008:244  View
33075 5257 CVE-2008-5507 MDVSA-2008:245  View
33076 5257 CVE-2008-5507 MDVSA-2009:012  View
33077 5257 CVE-2008-5507 http://www.mozilla.org/security/announce/2008/mfsa2008-65.html  View
33078 5257 CVE-2008-5507 RHSA-2008:1036  View
33079 5257 CVE-2008-5507 RHSA-2008:1037  View
33080 5257 CVE-2008-5507 RHSA-2009:0002  View
33081 5257 CVE-2008-5507 20081218 Firefox cross-domain text theft (CESA-2008-011)  View
33082 5257 CVE-2008-5507 32882  View
33083 5257 CVE-2008-5507 1021423  View
33084 5257 CVE-2008-5507 USN-690-2  View
33085 5257 CVE-2008-5507 USN-701-1  View
33086 5257 CVE-2008-5507 USN-701-2  View
33087 5257 CVE-2008-5507 USN-690-1  View
33088 5257 CVE-2008-5507 USN-690-3  View
33089 5257 CVE-2008-5507 ADV-2009-0977  View
33090 5257 CVE-2008-5507 mozilla-javascripturl-infor-disclosure(47413)  View
33091 5257 CVE-2008-5507 https://bugzilla.mozilla.org/show_bug.cgi?id=461735  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46927 JVNDB-2008-002237 複数の Mozilla 製品におけるデータの一部にアクセスされる脆弱性 複数の Mozilla 製品には、JavaScript URL の処理に不備があるため、同一生成元ポリシーを回避され、別ドメインからデータの一部にアクセスされる脆弱性が存在します。 CVE-2008-5507 35620 CVE-2008-5507 5257 6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002237.html 2008-12-17 2009-06-30 View