Vulnerability Details : CVE-2008-5507
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.
Vulnerability category: Information leak
Products affected by CVE-2008-5507
- cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
Threat overview for CVE-2008-5507
Top countries where our scanners detected CVE-2008-5507
Top open port discovered on systems with this issue
5555
IPs affected by CVE-2008-5507 121
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2008-5507!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2008-5507
0.64%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 79 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-5507
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.0
|
MEDIUM | AV:N/AC:M/Au:S/C:P/I:P/A:P |
6.8
|
6.4
|
NIST |
CWE ids for CVE-2008-5507
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-5507
-
http://www.redhat.com/support/errata/RHSA-2008-1036.html
Third Party Advisory
-
http://www.ubuntu.com/usn/usn-690-2
Third Party Advisory
-
http://www.mandriva.com/security/advisories?name=MDVSA-2008:245
Third Party Advisory
-
http://www.redhat.com/support/errata/RHSA-2009-0002.html
Third Party Advisory
-
http://www.redhat.com/support/errata/RHSA-2008-1037.html
Third Party Advisory
-
http://www.mozilla.org/security/announce/2008/mfsa2008-65.html
Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/47413
Third Party Advisory;VDB Entry
-
http://scary.beasts.org/security/CESA-2008-011.html
Third Party Advisory
-
https://usn.ubuntu.com/690-1/
Third Party Advisory
-
http://www.debian.org/security/2009/dsa-1696
[SECURITY] [DSA 1696-1] New icedove packages fix several vulnerabilitiesThird Party Advisory
-
http://www.ubuntu.com/usn/usn-701-1
Third Party Advisory
-
http://www.debian.org/security/2009/dsa-1707
Third Party Advisory
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:012
Third Party Advisory
-
https://bugzilla.mozilla.org/show_bug.cgi?id=461735
Issue Tracking;Vendor Advisory
-
http://www.securitytracker.com/id?1021423
Third Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/32882
Third Party Advisory;VDB Entry
-
http://www.ubuntu.com/usn/usn-701-2
Third Party Advisory
-
http://www.debian.org/security/2009/dsa-1697
[SECURITY] [DSA 1697-1] New iceape packages fix several vulnerabilitiesThird Party Advisory
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1
Broken Link
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Broken Link
-
http://www.debian.org/security/2009/dsa-1704
Third Party Advisory
-
https://usn.ubuntu.com/690-3/
Third Party Advisory
-
http://www.vupen.com/english/advisories/2009/0977
Webmail: access your OVH emails on ovhcloud.com | OVHcloudThird Party Advisory
-
http://www.securityfocus.com/archive/1/499353/100/0/threaded
Third Party Advisory;VDB Entry
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376
Third Party Advisory
-
http://www.mandriva.com/security/advisories?name=MDVSA-2008:244
Third Party Advisory
Jump to