CVE-2008-5511

Description (CNA)

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.securityfocus.com/bid/32882
• https://bugzilla.mozilla.org/show_bug.cgi?id=451680
• http://secunia.com/advisories/33408
• http://www.debian.org/security/2009/dsa-1697
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11881
• https://usn.ubuntu.com/690-3/
• http://secunia.com/advisories/33205
• http://www.securitytracker.com/id?1021418
• http://secunia.com/advisories/33421
• http://secunia.com/advisories/33232
• http://www.redhat.com/support/errata/RHSA-2008-1036.html
• http://www.mozilla.org/security/announce/2008/mfsa2008-68.html
• http://www.vupen.com/english/advisories/2009/0977
• http://www.ubuntu.com/usn/usn-690-2
• http://www.ubuntu.com/usn/usn-701-1
• http://secunia.com/advisories/33231
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:245
• https://usn.ubuntu.com/690-1/
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:012
• http://secunia.com/advisories/33203
• http://secunia.com/advisories/33433
• http://www.debian.org/security/2009/dsa-1707
• http://secunia.com/advisories/33216
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
• http://www.redhat.com/support/errata/RHSA-2008-1037.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47417
• http://www.debian.org/security/2009/dsa-1704
• http://www.debian.org/security/2009/dsa-1696
• http://secunia.com/advisories/33204
• http://www.ubuntu.com/usn/usn-701-2
• http://secunia.com/advisories/33184
• http://www.redhat.com/support/errata/RHSA-2009-0002.html
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:244
• https://bugzilla.mozilla.org/show_bug.cgi?id=464174
• http://secunia.com/advisories/33415
• http://secunia.com/advisories/33188
• http://secunia.com/advisories/33523
• http://secunia.com/advisories/35080
• http://secunia.com/advisories/33547
• http://secunia.com/advisories/33434
• http://secunia.com/advisories/33189
• http://secunia.com/advisories/34501

ADP enrichment