CVEDB API

Vulnerability Details CVE-2008-5023

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.145

EPSS Ranking 94.2%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2008-5023

Mozilla » Firefox » Version: 2.0

cpe:2.3:a:mozilla:firefox:2.0
Mozilla » Firefox » Version: 2.0.0.1

cpe:2.3:a:mozilla:firefox:2.0.0.1
Mozilla » Firefox » Version: 2.0.0.10

cpe:2.3:a:mozilla:firefox:2.0.0.10
Mozilla » Firefox » Version: 2.0.0.11

cpe:2.3:a:mozilla:firefox:2.0.0.11
Mozilla » Firefox » Version: 2.0.0.12

cpe:2.3:a:mozilla:firefox:2.0.0.12
Mozilla » Firefox » Version: 2.0.0.13

cpe:2.3:a:mozilla:firefox:2.0.0.13
Mozilla » Firefox » Version: 2.0.0.14

cpe:2.3:a:mozilla:firefox:2.0.0.14
Mozilla » Firefox » Version: 2.0.0.15

cpe:2.3:a:mozilla:firefox:2.0.0.15
Mozilla » Firefox » Version: 2.0.0.16

cpe:2.3:a:mozilla:firefox:2.0.0.16
Mozilla » Firefox » Version: 2.0.0.17

cpe:2.3:a:mozilla:firefox:2.0.0.17
Mozilla » Firefox » Version: 2.0.0.2

cpe:2.3:a:mozilla:firefox:2.0.0.2
Mozilla » Firefox » Version: 2.0.0.3

cpe:2.3:a:mozilla:firefox:2.0.0.3
Mozilla » Firefox » Version: 2.0.0.4

cpe:2.3:a:mozilla:firefox:2.0.0.4
Mozilla » Firefox » Version: 2.0.0.5

cpe:2.3:a:mozilla:firefox:2.0.0.5
Mozilla » Firefox » Version: 2.0.0.6

cpe:2.3:a:mozilla:firefox:2.0.0.6
Mozilla » Firefox » Version: 2.0.0.7

cpe:2.3:a:mozilla:firefox:2.0.0.7
Mozilla » Firefox » Version: 2.0.0.8

cpe:2.3:a:mozilla:firefox:2.0.0.8
Mozilla » Firefox » Version: 2.0.0.9

cpe:2.3:a:mozilla:firefox:2.0.0.9
Mozilla » Firefox » Version: 3.0

cpe:2.3:a:mozilla:firefox:3.0
Mozilla » Firefox » Version: 3.0.1

cpe:2.3:a:mozilla:firefox:3.0.1
Mozilla » Firefox » Version: 3.0.2

cpe:2.3:a:mozilla:firefox:3.0.2
Mozilla » Firefox » Version: 3.0.3

cpe:2.3:a:mozilla:firefox:3.0.3
Mozilla » Seamonkey » Version: 1.0

cpe:2.3:a:mozilla:seamonkey:1.0
Mozilla » Seamonkey » Version: 1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1
Mozilla » Seamonkey » Version: 1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2
Mozilla » Seamonkey » Version: 1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3
Mozilla » Seamonkey » Version: 1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4
Mozilla » Seamonkey » Version: 1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5
Mozilla » Seamonkey » Version: 1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6
Mozilla » Seamonkey » Version: 1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7
Mozilla » Seamonkey » Version: 1.0.8

cpe:2.3:a:mozilla:seamonkey:1.0.8
Mozilla » Seamonkey » Version: 1.0.9

cpe:2.3:a:mozilla:seamonkey:1.0.9
Mozilla » Seamonkey » Version: 1.1

cpe:2.3:a:mozilla:seamonkey:1.1
Mozilla » Seamonkey » Version: 1.1.1

cpe:2.3:a:mozilla:seamonkey:1.1.1
Mozilla » Seamonkey » Version: 1.1.10

cpe:2.3:a:mozilla:seamonkey:1.1.10
Mozilla » Seamonkey » Version: 1.1.11

cpe:2.3:a:mozilla:seamonkey:1.1.11
Mozilla » Seamonkey » Version: 1.1.12

cpe:2.3:a:mozilla:seamonkey:1.1.12
Mozilla » Seamonkey » Version: 1.1.2

cpe:2.3:a:mozilla:seamonkey:1.1.2
Mozilla » Seamonkey » Version: 1.1.3

cpe:2.3:a:mozilla:seamonkey:1.1.3
Mozilla » Seamonkey » Version: 1.1.4

cpe:2.3:a:mozilla:seamonkey:1.1.4
Mozilla » Seamonkey » Version: 1.1.5

cpe:2.3:a:mozilla:seamonkey:1.1.5
Mozilla » Seamonkey » Version: 1.1.6

cpe:2.3:a:mozilla:seamonkey:1.1.6
Mozilla » Seamonkey » Version: 1.1.7

cpe:2.3:a:mozilla:seamonkey:1.1.7
Mozilla » Seamonkey » Version: 1.1.8

cpe:2.3:a:mozilla:seamonkey:1.1.8
Mozilla » Seamonkey » Version: 1.1.9

cpe:2.3:a:mozilla:seamonkey:1.1.9
Canonical » Ubuntu Linux » Version: 6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06
Canonical » Ubuntu Linux » Version: 7.10

cpe:2.3:o:canonical:ubuntu_linux:7.10
Canonical » Ubuntu Linux » Version: 8.04

cpe:2.3:o:canonical:ubuntu_linux:8.04
Canonical » Ubuntu Linux » Version: 8.10

cpe:2.3:o:canonical:ubuntu_linux:8.10
Debian » Debian Linux » Version: 4.0

cpe:2.3:o:debian:debian_linux:4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5023

Products

Pricing

Contact Us