[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247621

 
 

909

 
 

194512

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2008-5513Date: (C)2008-12-17   (M)2023-12-22


Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
SECTRACK-1021421
SUNALERT-256408
BID-32882
SECUNIA-33184
SECUNIA-33188
SECUNIA-33189
SECUNIA-33203
SECUNIA-33216
SECUNIA-33231
SECUNIA-33421
SECUNIA-33523
SECUNIA-34501
ADV-2009-0977
DSA-1707
MDVSA-2008:244
MDVSA-2008:245
RHSA-2008:1036
RHSA-2008:1037
RHSA-2009:0002
USN-690-1
USN-690-2
firefox-sessionrestore-security-bypass(47418)
http://www.mozilla.org/security/announce/2008/mfsa2008-69.html
oval:org.mitre.oval:def:10389

CWE    1
CWE-79
OVAL    12
oval:org.secpod.oval:def:200409
oval:org.secpod.oval:def:600436
oval:org.secpod.oval:def:400064
oval:org.secpod.oval:def:301253
...

© SecPod Technologies