CVEDB API

Vulnerability Details CVE-2008-5022

The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.105

EPSS Ranking 92.9%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2008-5022

Mozilla » Firefox » Version: 2.0

cpe:2.3:a:mozilla:firefox:2.0
Mozilla » Firefox » Version: 2.0.0.1

cpe:2.3:a:mozilla:firefox:2.0.0.1
Mozilla » Firefox » Version: 2.0.0.10

cpe:2.3:a:mozilla:firefox:2.0.0.10
Mozilla » Firefox » Version: 2.0.0.11

cpe:2.3:a:mozilla:firefox:2.0.0.11
Mozilla » Firefox » Version: 2.0.0.12

cpe:2.3:a:mozilla:firefox:2.0.0.12
Mozilla » Firefox » Version: 2.0.0.13

cpe:2.3:a:mozilla:firefox:2.0.0.13
Mozilla » Firefox » Version: 2.0.0.14

cpe:2.3:a:mozilla:firefox:2.0.0.14
Mozilla » Firefox » Version: 2.0.0.15

cpe:2.3:a:mozilla:firefox:2.0.0.15
Mozilla » Firefox » Version: 2.0.0.16

cpe:2.3:a:mozilla:firefox:2.0.0.16
Mozilla » Firefox » Version: 2.0.0.17

cpe:2.3:a:mozilla:firefox:2.0.0.17
Mozilla » Firefox » Version: 2.0.0.2

cpe:2.3:a:mozilla:firefox:2.0.0.2
Mozilla » Firefox » Version: 2.0.0.3

cpe:2.3:a:mozilla:firefox:2.0.0.3
Mozilla » Firefox » Version: 2.0.0.4

cpe:2.3:a:mozilla:firefox:2.0.0.4
Mozilla » Firefox » Version: 2.0.0.5

cpe:2.3:a:mozilla:firefox:2.0.0.5
Mozilla » Firefox » Version: 2.0.0.6

cpe:2.3:a:mozilla:firefox:2.0.0.6
Mozilla » Firefox » Version: 2.0.0.7

cpe:2.3:a:mozilla:firefox:2.0.0.7
Mozilla » Firefox » Version: 2.0.0.8

cpe:2.3:a:mozilla:firefox:2.0.0.8
Mozilla » Firefox » Version: 2.0.0.9

cpe:2.3:a:mozilla:firefox:2.0.0.9
Mozilla » Firefox » Version: 3.0

cpe:2.3:a:mozilla:firefox:3.0
Mozilla » Firefox » Version: 3.0.1

cpe:2.3:a:mozilla:firefox:3.0.1
Mozilla » Firefox » Version: 3.0.2

cpe:2.3:a:mozilla:firefox:3.0.2
Mozilla » Firefox » Version: 3.0.3

cpe:2.3:a:mozilla:firefox:3.0.3
Mozilla » Seamonkey » Version: 1.0

cpe:2.3:a:mozilla:seamonkey:1.0
Mozilla » Seamonkey » Version: 1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1
Mozilla » Seamonkey » Version: 1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2
Mozilla » Seamonkey » Version: 1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3
Mozilla » Seamonkey » Version: 1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4
Mozilla » Seamonkey » Version: 1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5
Mozilla » Seamonkey » Version: 1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6
Mozilla » Seamonkey » Version: 1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7
Mozilla » Seamonkey » Version: 1.0.8

cpe:2.3:a:mozilla:seamonkey:1.0.8
Mozilla » Seamonkey » Version: 1.0.9

cpe:2.3:a:mozilla:seamonkey:1.0.9
Mozilla » Seamonkey » Version: 1.1

cpe:2.3:a:mozilla:seamonkey:1.1
Mozilla » Seamonkey » Version: 1.1.1

cpe:2.3:a:mozilla:seamonkey:1.1.1
Mozilla » Seamonkey » Version: 1.1.10

cpe:2.3:a:mozilla:seamonkey:1.1.10
Mozilla » Seamonkey » Version: 1.1.11

cpe:2.3:a:mozilla:seamonkey:1.1.11
Mozilla » Seamonkey » Version: 1.1.12

cpe:2.3:a:mozilla:seamonkey:1.1.12
Mozilla » Seamonkey » Version: 1.1.2

cpe:2.3:a:mozilla:seamonkey:1.1.2
Mozilla » Seamonkey » Version: 1.1.3

cpe:2.3:a:mozilla:seamonkey:1.1.3
Mozilla » Seamonkey » Version: 1.1.4

cpe:2.3:a:mozilla:seamonkey:1.1.4
Mozilla » Seamonkey » Version: 1.1.5

cpe:2.3:a:mozilla:seamonkey:1.1.5
Mozilla » Seamonkey » Version: 1.1.6

cpe:2.3:a:mozilla:seamonkey:1.1.6
Mozilla » Seamonkey » Version: 1.1.7

cpe:2.3:a:mozilla:seamonkey:1.1.7
Mozilla » Seamonkey » Version: 1.1.8

cpe:2.3:a:mozilla:seamonkey:1.1.8
Mozilla » Seamonkey » Version: 1.1.9

cpe:2.3:a:mozilla:seamonkey:1.1.9
Mozilla » Thunderbird » Version: 2.0

cpe:2.3:a:mozilla:thunderbird:2.0
Mozilla » Thunderbird » Version: 2.0.0.0

cpe:2.3:a:mozilla:thunderbird:2.0.0.0
Mozilla » Thunderbird » Version: 2.0.0.12

cpe:2.3:a:mozilla:thunderbird:2.0.0.12
Mozilla » Thunderbird » Version: 2.0.0.14

cpe:2.3:a:mozilla:thunderbird:2.0.0.14
Mozilla » Thunderbird » Version: 2.0.0.16

cpe:2.3:a:mozilla:thunderbird:2.0.0.16
Mozilla » Thunderbird » Version: 2.0.0.17

cpe:2.3:a:mozilla:thunderbird:2.0.0.17
Mozilla » Thunderbird » Version: 2.0.0.4

cpe:2.3:a:mozilla:thunderbird:2.0.0.4
Mozilla » Thunderbird » Version: 2.0.0.5

cpe:2.3:a:mozilla:thunderbird:2.0.0.5
Mozilla » Thunderbird » Version: 2.0.0.6

cpe:2.3:a:mozilla:thunderbird:2.0.0.6
Mozilla » Thunderbird » Version: 2.0.0.9

cpe:2.3:a:mozilla:thunderbird:2.0.0.9
Canonical » Ubuntu Linux » Version: 6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06
Canonical » Ubuntu Linux » Version: 7.10

cpe:2.3:o:canonical:ubuntu_linux:7.10
Canonical » Ubuntu Linux » Version: 8.04

cpe:2.3:o:canonical:ubuntu_linux:8.04
Canonical » Ubuntu Linux » Version: 8.10

cpe:2.3:o:canonical:ubuntu_linux:8.10
Debian » Debian Linux » Version: 4.0

cpe:2.3:o:debian:debian_linux:4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5022

Products

Pricing

Contact Us