NetSight
IP …
high7.5

CVE-2008-2802

Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL docu…

Impact

Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file, related to this file's "privilege level."

Affected products

VendorProductAffected versions
MozillaFirefox
through 2.0.0.14
Versions 2.0, 2.0.0.1, 2.0.0.2, 2.0.0.3, 2.0.0.4
MozillaSeamonkey
through 1.1.9
Versions 1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5
MozillaThunderbird
through 2.0.0.14
Versions 2.0.0.0, 2.0.0.1, 2.0.0.2, 2.0.0.3, 2.0.0.4

Weakness classification

CWE-264

References