NVD

Id
5644  
Name
CVE-2008-5913  
Description
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-03  
Published
2009-01-20  
Modified Date
2012-11-05  
Seq
2008-5913  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
34910 5644 CVE-2008-5913 http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html  View
34911 5644 CVE-2008-5913 FEDORA-2010-10344  View
34912 5644 CVE-2008-5913 FEDORA-2010-10361  View
34913 5644 CVE-2008-5913 SUSE-SA:2010:030  View
34914 5644 CVE-2008-5913 oval:org.mitre.oval:def:11139  View
34915 5644 CVE-2008-5913 http://support.avaya.com/css/P8/documents/100091069  View
34916 5644 CVE-2008-5913 USN-930-1  View
34917 5644 CVE-2008-5913 http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161  View
34918 5644 CVE-2008-5913 http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html  View
34919 5644 CVE-2008-5913 MDVSA-2010:125  View
34920 5644 CVE-2008-5913 http://www.mozilla.org/security/announce/2010/mfsa2010-33.html  View
34921 5644 CVE-2008-5913 RHSA-2010:0500  View
34922 5644 CVE-2008-5913 RHSA-2010:0501  View
34923 5644 CVE-2008-5913 33276  View
34924 5644 CVE-2008-5913 http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf  View
34925 5644 CVE-2008-5913 USN-930-2  View
34926 5644 CVE-2008-5913 ADV-2010-1551  View
34927 5644 CVE-2008-5913 ADV-2010-1557  View
34928 5644 CVE-2008-5913 ADV-2010-1592  View
34929 5644 CVE-2008-5913 ADV-2010-1640  View
34930 5644 CVE-2008-5913 ADV-2010-1773  View
34931 5644 CVE-2008-5913 https://bugzilla.mozilla.org/show_bug.cgi?id=475585  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40621 JVNDB-2009-001627 Mozilla Firefox の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性 Mozilla Firefox の JavaScript インプリメンテーションの関数は、Web サイトにログインしているユーザが存在する場合、"temporary footprint" を作成および公開するため、ユーザは偽装したポップアップメッセージに従って行動させられる脆弱性が存在します。 CVE-2008-5913 36026 CVE-2008-5913 5644 2.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001627.html 2009-01-20 2010-07-15 View