CVEDB API

Vulnerability Details CVE-2008-5024

Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.055

EPSS Ranking 89.8%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2008-5024

Mozilla » Firefox » Version: 2.0

cpe:2.3:a:mozilla:firefox:2.0
Mozilla » Firefox » Version: 2.0.0.1

cpe:2.3:a:mozilla:firefox:2.0.0.1
Mozilla » Firefox » Version: 2.0.0.10

cpe:2.3:a:mozilla:firefox:2.0.0.10
Mozilla » Firefox » Version: 2.0.0.11

cpe:2.3:a:mozilla:firefox:2.0.0.11
Mozilla » Firefox » Version: 2.0.0.12

cpe:2.3:a:mozilla:firefox:2.0.0.12
Mozilla » Firefox » Version: 2.0.0.13

cpe:2.3:a:mozilla:firefox:2.0.0.13
Mozilla » Firefox » Version: 2.0.0.14

cpe:2.3:a:mozilla:firefox:2.0.0.14
Mozilla » Firefox » Version: 2.0.0.15

cpe:2.3:a:mozilla:firefox:2.0.0.15
Mozilla » Firefox » Version: 2.0.0.16

cpe:2.3:a:mozilla:firefox:2.0.0.16
Mozilla » Firefox » Version: 2.0.0.17

cpe:2.3:a:mozilla:firefox:2.0.0.17
Mozilla » Firefox » Version: 2.0.0.2

cpe:2.3:a:mozilla:firefox:2.0.0.2
Mozilla » Firefox » Version: 2.0.0.3

cpe:2.3:a:mozilla:firefox:2.0.0.3
Mozilla » Firefox » Version: 2.0.0.4

cpe:2.3:a:mozilla:firefox:2.0.0.4
Mozilla » Firefox » Version: 2.0.0.5

cpe:2.3:a:mozilla:firefox:2.0.0.5
Mozilla » Firefox » Version: 2.0.0.6

cpe:2.3:a:mozilla:firefox:2.0.0.6
Mozilla » Firefox » Version: 2.0.0.7

cpe:2.3:a:mozilla:firefox:2.0.0.7
Mozilla » Firefox » Version: 2.0.0.8

cpe:2.3:a:mozilla:firefox:2.0.0.8
Mozilla » Firefox » Version: 2.0.0.9

cpe:2.3:a:mozilla:firefox:2.0.0.9
Mozilla » Firefox » Version: 3.0

cpe:2.3:a:mozilla:firefox:3.0
Mozilla » Firefox » Version: 3.0.1

cpe:2.3:a:mozilla:firefox:3.0.1
Mozilla » Firefox » Version: 3.0.2

cpe:2.3:a:mozilla:firefox:3.0.2
Mozilla » Firefox » Version: 3.0.3

cpe:2.3:a:mozilla:firefox:3.0.3
Mozilla » Seamonkey » Version: 1.0

cpe:2.3:a:mozilla:seamonkey:1.0
Mozilla » Seamonkey » Version: 1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1
Mozilla » Seamonkey » Version: 1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2
Mozilla » Seamonkey » Version: 1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3
Mozilla » Seamonkey » Version: 1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4
Mozilla » Seamonkey » Version: 1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5
Mozilla » Seamonkey » Version: 1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6
Mozilla » Seamonkey » Version: 1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7
Mozilla » Seamonkey » Version: 1.0.8

cpe:2.3:a:mozilla:seamonkey:1.0.8
Mozilla » Seamonkey » Version: 1.0.9

cpe:2.3:a:mozilla:seamonkey:1.0.9
Mozilla » Seamonkey » Version: 1.1

cpe:2.3:a:mozilla:seamonkey:1.1
Mozilla » Seamonkey » Version: 1.1.1

cpe:2.3:a:mozilla:seamonkey:1.1.1
Mozilla » Seamonkey » Version: 1.1.10

cpe:2.3:a:mozilla:seamonkey:1.1.10
Mozilla » Seamonkey » Version: 1.1.11

cpe:2.3:a:mozilla:seamonkey:1.1.11
Mozilla » Seamonkey » Version: 1.1.12

cpe:2.3:a:mozilla:seamonkey:1.1.12
Mozilla » Seamonkey » Version: 1.1.2

cpe:2.3:a:mozilla:seamonkey:1.1.2
Mozilla » Seamonkey » Version: 1.1.3

cpe:2.3:a:mozilla:seamonkey:1.1.3
Mozilla » Seamonkey » Version: 1.1.4

cpe:2.3:a:mozilla:seamonkey:1.1.4
Mozilla » Seamonkey » Version: 1.1.5

cpe:2.3:a:mozilla:seamonkey:1.1.5
Mozilla » Seamonkey » Version: 1.1.6

cpe:2.3:a:mozilla:seamonkey:1.1.6
Mozilla » Seamonkey » Version: 1.1.7

cpe:2.3:a:mozilla:seamonkey:1.1.7
Mozilla » Seamonkey » Version: 1.1.8

cpe:2.3:a:mozilla:seamonkey:1.1.8
Mozilla » Seamonkey » Version: 1.1.9

cpe:2.3:a:mozilla:seamonkey:1.1.9
Mozilla » Thunderbird » Version: 2.0

cpe:2.3:a:mozilla:thunderbird:2.0
Mozilla » Thunderbird » Version: 2.0.0.0

cpe:2.3:a:mozilla:thunderbird:2.0.0.0
Mozilla » Thunderbird » Version: 2.0.0.12

cpe:2.3:a:mozilla:thunderbird:2.0.0.12
Mozilla » Thunderbird » Version: 2.0.0.14

cpe:2.3:a:mozilla:thunderbird:2.0.0.14
Mozilla » Thunderbird » Version: 2.0.0.16

cpe:2.3:a:mozilla:thunderbird:2.0.0.16
Mozilla » Thunderbird » Version: 2.0.0.17

cpe:2.3:a:mozilla:thunderbird:2.0.0.17
Mozilla » Thunderbird » Version: 2.0.0.4

cpe:2.3:a:mozilla:thunderbird:2.0.0.4
Mozilla » Thunderbird » Version: 2.0.0.5

cpe:2.3:a:mozilla:thunderbird:2.0.0.5
Mozilla » Thunderbird » Version: 2.0.0.6

cpe:2.3:a:mozilla:thunderbird:2.0.0.6
Mozilla » Thunderbird » Version: 2.0.0.9

cpe:2.3:a:mozilla:thunderbird:2.0.0.9
Canonical » Ubuntu Linux » Version: 6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06
Canonical » Ubuntu Linux » Version: 7.10

cpe:2.3:o:canonical:ubuntu_linux:7.10
Canonical » Ubuntu Linux » Version: 8.04

cpe:2.3:o:canonical:ubuntu_linux:8.04
Canonical » Ubuntu Linux » Version: 8.10

cpe:2.3:o:canonical:ubuntu_linux:8.10
Debian » Debian Linux » Version: 4.0

cpe:2.3:o:debian:debian_linux:4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5024

Products

Pricing

Contact Us