NetSight
IP …
high7.5

CVE-2008-3835

The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attack…

Impact

The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.

Affected products

VendorProductAffected versions
MozillaFirefox
through 2.0.0.16
Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3
MozillaSeamonkey
All versions
through 1.1.11
Versions 1.0, 1.0.1, 1.0.2, 1.0.3
MozillaThunderbird
All versions
through 2.0.0.16
Versions 0.1, 0.2, 0.3, 0.4

Weakness classification

CWE-264

References