NetSight
IP …
medium4.9

CVE-2008-5913

The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a ran…

Impact

The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 3.5, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5
MozillaSeamonkey
through 2.0.4
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

References