NetSight
IP …
medium6.8

CVE-2008-2810

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote a…

Impact

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut.

Affected products

VendorProductAffected versions
MozillaFirefox
through 2.0.0.14
Versions 2.0, 2.0.0.1, 2.0.0.2, 2.0.0.3, 2.0.0.4
MozillaSeamonkey
through 1.1.9
Versions 1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5

Weakness classification

CWE-264

References