CVE-2008-4058 | BDVDB-2026-32519 Detail
Description#
The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/32025
- http://secunia.com/advisories/32011
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232
- http://www.debian.org/security/2009/dsa-1697
- http://secunia.com/advisories/32096
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html
- http://www.ubuntu.com/usn/usn-645-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45349
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:206
- http://secunia.com/advisories/32144
- http://secunia.com/advisories/32010
- http://www.mozilla.org/security/announce/2008/mfsa2008-41.html
- http://www.vupen.com/english/advisories/2009/0977
- http://www.ubuntu.com/usn/usn-645-2
- http://www.securityfocus.com/bid/31346
Show all 40
- http://secunia.com/advisories/31985
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html
- http://secunia.com/advisories/31984
- http://secunia.com/advisories/32185
- http://secunia.com/advisories/32196
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html
- http://www.debian.org/security/2008/dsa-1669
- http://secunia.com/advisories/32042
- http://secunia.com/advisories/33433
- http://www.vupen.com/english/advisories/2008/2661
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422
- http://secunia.com/advisories/32095
- http://secunia.com/advisories/32089
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
- http://secunia.com/advisories/32092
- http://www.redhat.com/support/errata/RHSA-2008-0879.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:205
- http://www.debian.org/security/2009/dsa-1696
- http://download.novell.com/Download?buildid=WZXONb-tqBw~
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html
- http://secunia.com/advisories/31987
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9679
- http://www.securitytracker.com/id?1020915
- http://www.ubuntu.com/usn/usn-647-1
- http://secunia.com/advisories/32007
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.