NVD

Id
6692  
Name
CVE-2008-6961  
Description
mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2009-08-13  
Modified Date
2009-08-13  
Seq
2008-6961  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38388 6692 CVE-2008-6961 http://www.mozilla.org/security/announce/2008/mfsa2008-59.html  View
38389 6692 CVE-2008-6961 32363  View
38390 6692 CVE-2008-6961 1021247  View
38391 6692 CVE-2008-6961 mozilla-domproperties-info-disclosure(46734)  View
38392 6692 CVE-2008-6961 https://bugzilla.mozilla.org/show_bug.cgi?id=458883  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49935 JVNDB-2008-005245 Mozilla Thunderbird などの mailnews における重要な情報を取得される脆弱性 Mozilla Thunderbird および SeaMonkey の mailnews には、メールで JavaScript が有効になっている際、受信者または転送メールのコメントなどの重要な情報を取得される脆弱性が存在します。 CVE-2008-6961 37074 CVE-2008-6961 6692 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005245.html 2008-11-19 2012-09-25 View