NetSight
high7.5

CVE-2008-2806

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket con…

Impact

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 2.0, 2.0.0.2, 2.0.0.3, 2.0.0.11, 2.0.0.12, 2.0.0.13
MozillaSeamonkey
Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5
MozillaThunderbird
Versions 2.0_.4, 2.0_.5, 2.0_.6, 2.0_.9, 2.0_.12, 2.0_.13

Weakness classification

References