Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.com/usn/usn-629-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=431409 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484 - https://bugzilla.mozilla.org/show_bug.cgi?id=418128 - http://www.debian.org/security/2008/dsa-1615 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html - http://secunia.com/advisories/31220 - http://secunia.com/advisories/31195 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10743 - http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619
definition/oval%3Aorg.mitre.oval%3Adef%3A10743 - http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619-1 - http://secunia.com/advisories/30911 - http://www.redhat.com/support/errata/RHSA-2008-0569.html - http://www.mozilla.org/security/announce/2008/mfsa2008-21.html - http://secunia.com/advisories/30878 - http://www.debian.org/security/2008/dsa-1621 - http://www.securityfocus.com/archive/1/494080/100/0/threaded - http://secunia.com/advisories/31286 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:136
CVE ID: CVE-2008-2800 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:14:14.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors involving (1) an event handler attached to an outer window, (2) a SCRIPT element in an unloaded document, or (3) the onreadystatechange handler in conjunction with an XMLHttpRequest. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - https://bugzilla.mozilla.org/sho
erences: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - https://bugzilla.mozilla.org/show_bug.cgi?id=433328 - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-1697 - http://www.mozilla.org/security/announce/2008/mfsa2008-22.html - http://secunia.com/advisories/31021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9386 - http://secunia.com/advisories/30898 - http://wiki.rpath.com/Advisories:rPSA-2008-0216 - https://issues.rpath.com/browse/RPL-2646 - http://secunia.com/advisories/30949 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-secur
://secunia.com/advisories/30949 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/31069 - http://secunia.com/advisories/31008 - http://secunia.com/advisories/31377 - http://rhn.redhat.com/errata/RHSA-2008-0616.html - http://www.vupen.com/english/advisories/2008/1993/references - http://secunia.com/advisories/31023 - http://www.securityfocus.com/bid/30038 - http://www.debian.org/security/2008/dsa-1607 - http://security.gentoo.org/glsa/glsa-200808-03.xml - http://secunia.com/advisories/31005 - http://secunia.com/advisories/33433 - https://www.redhat.com/archives/
08-03.xml - http://secunia.com/advisories/31005 - http://secunia.com/advisories/33433 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html - http://www.securitytracker.com/id?1020419 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15 - http://secunia.com/advisories/31183 - http://secunia.com/advisories/30903 - http://www.redhat.com/support/errata/RHSA-2008-0547.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=439035 - http://slackware.com/security/viewer.php?l=slackware-security
-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=439035 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 - https://bugzilla.mozilla.org/show_bug.cgi?id=428672 - http://www.debian.org/security/2008/dsa-1615 - http://secunia.com/advisories/31195 - http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619-1 - http://secunia.com/advisories/30911 - http://www.redhat.com/support/errata/RHSA-2008-0569.html - http://secunia.com/advisories/30878 - http://www.securityfocus.com/archive/1/494080/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html - http://secunia.com/advisories/34501 - https://b
ww.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html - http://secunia.com/advisories/34501 - https://bugzilla.mozilla.org/show_bug.cgi?id=432591 - https://bugzilla.mozilla.org/show_bug.cgi?id=440308 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:136
CVE ID: CVE-2008-2801 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:14:14.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-16
07/msg00004.html - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/31021 - https://bugzilla.mozilla.org/show_bug.cgi?id=418996 - http://secunia.com/advisories/30898 - http://wiki.rpath.com/Advisories:rPSA-2008-0216 - https://bugzilla.mozilla.org/show_bug.cgi?id=424188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11810 - https://issues.rpath.com/browse/RPL-2646 - http://secunia.com/advisories/30949 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia
ackware-security&y=2008&m=slackware-security.383152 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/31069 - http://secunia.com/advisories/31008 - http://secunia.com/advisories/31377 - http://rhn.redhat.com/errata/RHSA-2008-0616.html - http://www.vupen.com/english/advisories/2008/1993/references - http://secunia.com/advisories/31023 - http://www.securityfocus.com/bid/30038 - http://www.debian.org/security/2008/dsa-1607 - http://security.gentoo.org/glsa/glsa-200808-03.xml - http://secunia.com/advisories/31005 - http://secunia.com/advisories/33433 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html - http://www.securitytracker.co
/33433 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html - http://www.securitytracker.com/id?1020419 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15 - http://secunia.com/advisories/31183 - http://secunia.com/advisories/30903 - http://www.redhat.com/support/errata/RHSA-2008-0547.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 - http://www.debian.org/security/2008/dsa-1615 - https://bugzilla.mozilla.org/show_bug.cgi?id=424
ckware-security.384911 - http://www.debian.org/security/2008/dsa-1615 - https://bugzilla.mozilla.org/show_bug.cgi?id=424426 - http://secunia.com/advisories/31195 - http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619-1 - http://secunia.com/advisories/30911 - http://www.redhat.com/support/errata/RHSA-2008-0569.html - http://secunia.com/advisories/30878 - http://www.mozilla.org/security/announce/2008/mfsa2008-23.html - http://www.securityfocus.com/archive/1/494080/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html - http://secunia.com/advisories/34501 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:136
CVE ID: CVE-2008-2802 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:14:14.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file, related to this file's "privilege level." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-1697 - http
04.html - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/31021 - http://secunia.com/advisories/30898 - http://secunia.com/advisories/31403 - http://wiki.rpath.com/Advisories:rPSA-2008-0216 - https://issues.rpath.com/browse/RPL-2646 - http://secunia.com/advisories/30949 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/31069 - http://secunia.com/advisories/31008 - http://secunia.com/advisories/31377 - http://rhn.redhat.com/errata/RHSA-2008-0616.html - http://www.vupen.com/en
31008 - http://secunia.com/advisories/31377 - http://rhn.redhat.com/errata/RHSA-2008-0616.html - http://www.vupen.com/english/advisories/2008/1993/references - http://secunia.com/advisories/31023 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 - http://www.securityfocus.com/bid/30038 - http://secunia.com/advisories/30915 - http://www.debian.org/security/2008/dsa-1607 - http://security.gentoo.org/glsa/glsa-200808-03.xml - http://secunia.com/advisories/31005 - http://secunia.com/advisories/33433 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html - http://www.securitytracker.com/id?1020419 - http://secunia.com/advisories/31253 - http://www.mozill
July/msg00207.html - http://www.securitytracker.com/id?1020419 - http://secunia.com/advisories/31253 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html - http://secunia.com/advisories/31183 - http://secunia.com/advisories/30903 - http://www.redhat.com/support/errata/RHSA-2008-0547.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html - http://www.ubuntu.com/usn/usn-629-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11121 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://sl
tion/oval%3Aorg.mitre.oval%3Adef%3A11121 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 - http://www.mozilla.org/security/announce/2008/mfsa2008-24.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484 - http://www.debian.org/security/2008/dsa-1615 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html - http://secunia.com/advisories/31220 - http://secunia.com/advisories/31195 - http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619-1 - http://secunia.com/advisories/30911 - http:
http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619-1 - http://secunia.com/advisories/30911 - http://www.redhat.com/support/errata/RHSA-2008-0569.html - http://secunia.com/advisories/30878 - http://www.debian.org/security/2008/dsa-1621 - http://www.securityfocus.com/archive/1/494080/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=419846 - http://secunia.com/advisories/31286 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html - http://secunia.com/advisories/34501 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:136
CVE ID: CVE-2008-2803 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:14:14.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - http://www.redha
m Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/31021 - http://secunia.com/advisories/30898 - http://secunia.com/advisories/31403 - http://wiki.rpath.com/Advisories:rPSA-2008-0216 - https://issues.rpath.com/browse/RPL-2646 - http://secunia.com/advisories/30949 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/31069 - https://bugzilla.mozilla.org/show_bug.cgi?id=418356 - ht
sh/advisories/2009/0977 - http://secunia.com/advisories/31069 - https://bugzilla.mozilla.org/show_bug.cgi?id=418356 - http://secunia.com/advisories/31008 - http://secunia.com/advisories/31377 - http://rhn.redhat.com/errata/RHSA-2008-0616.html - http://www.vupen.com/english/advisories/2008/1993/references - http://secunia.com/advisories/31023 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 - http://www.securityfocus.com/bid/30038 - http://secunia.com/advisories/30915 - http://www.debian.org/security/2008/dsa-1607 - http://security.gentoo.org/glsa/glsa-200808-03.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10747 - http://secunia
8-03.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10747 - http://secunia.com/advisories/31005 - http://secunia.com/advisories/33433 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html - http://www.securitytracker.com/id?1020419 - http://secunia.com/advisories/31253 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html - http://secunia.com/advisories/31183 - http://secunia.com/advisories/30903 - http://www.redhat.com/support/errata/RHSA-2008-0547.html - https://www.redhat.com/archives/fedora-package-an
ies/30903 - http://www.redhat.com/support/errata/RHSA-2008-0547.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html - http://www.ubuntu.com/usn/usn-629-1 - http://www.mozilla.org/security/announce/2008/mfsa2008-25.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484 - http://www.debian.org/security/2008/dsa-1615 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html - http://secunia.com/advisories/31220 - http://se
.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html - http://secunia.com/advisories/31220 - http://secunia.com/advisories/31195 - http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619-1 - http://secunia.com/advisories/30911 - http://www.redhat.com/support/errata/RHSA-2008-0569.html - http://secunia.com/advisories/30878 - http://www.debian.org/security/2008/dsa-1621 - http://www.securityfocus.com/archive/1/494080/100/0/threaded - http://secunia.com/advisories/31286 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html - http://secunia.com/advisories/34501 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:136
CVE ID: CVE-2008-2804 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-17T01:26:29.975Z Description: No description available.
CVE ID: CVE-2008-2805 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:14:14.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/31021 - http://secunia.com/advisories/30898 - http:
ww.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/31021 - http://secunia.com/advisories/30898 - http://wiki.rpath.com/Advisories:rPSA-2008-0216 - https://issues.rpath.com/browse/RPL-2646 - http://secunia.com/advisories/30949 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/31069 - https://bugzilla.mozilla.org/show_bug.cgi?id=423541 - http://secunia.com/advisories/31008 - http://secunia.com/advisories/31377 - http://rhn.redhat.com/errata/RHSA-2008-0616.html - http://www.vupen.com/english/advisories/2008/1993/references - http://secunia.com/ad
at.com/errata/RHSA-2008-0616.html - http://www.vupen.com/english/advisories/2008/1993/references - http://secunia.com/advisories/31023 - http://www.securityfocus.com/bid/30038 - http://www.debian.org/security/2008/dsa-1607 - http://security.gentoo.org/glsa/glsa-200808-03.xml - http://secunia.com/advisories/31005 - http://secunia.com/advisories/33433 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html - http://www.securitytracker.com/id?1020419 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15 - http://secunia.com/advisories/31183 - http://secunia.com/advisories/30903 - http://www.redhat.com/support/errata/RHSA-2008-0547.html -
.com/advisories/31183 - http://secunia.com/advisories/30903 - http://www.redhat.com/support/errata/RHSA-2008-0547.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 - http://www.debian.org/security/2008/dsa-1615 - http://secunia.com/advisories/31195 - http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619-1 - http://secunia.com/advisories/30911 - http://www.redhat.com/support/errata/RHSA-2008-0569.html - http://secunia.com/advisories/30878 - http://www.securityfocus.com/archi
redhat.com/support/errata/RHSA-2008-0569.html - http://secunia.com/advisories/30878 - http://www.securityfocus.com/archive/1/494080/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10143 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html - http://secunia.com/advisories/34501 - http://www.mozilla.org/security/announce/2008/mfsa2008-27.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:136
CVE ID: CVE-2008-2806 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:14:14.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - http://secunia.com/advisories/31021 - http://secunia.com/advisories/30898 - http://wiki.rpath.com/Advisories:rPSA-2008-0216 - http
unia.com/advisories/31021 - http://secunia.com/advisories/30898 - http://wiki.rpath.com/Advisories:rPSA-2008-0216 - https://issues.rpath.com/browse/RPL-2646 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 - https://bugzilla.mozilla.org/show_bug.cgi?id=408329 - http://secunia.com/advisories/31008 - http://www.vupen.com/english/advisories/2008/1993/references - http://secunia.com/advisories/31023 - http://www.securityfocus.com/bid/30038 - http://secunia.com/advisories/31005 - http://www.securitytracker.com/id?1020419 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15 - https://www.redhat.com/archives/fedora-p
/www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html - http://www.mozilla.org/security/announce/2008/mfsa2008-28.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 - http://secunia.com/advisories/31076 - http://www.ubuntu.com/usn/usn-619-1 - http://secunia.com/advisories/30911 - http://www.securityfocus.com/archive/1/494080/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html
CVE ID: CVE-2008-2807 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:14:14.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-1697
msg00004.html - http://www.redhat.com/support/errata/RHSA-2008-0549.html - http://www.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/31021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50656 - http://secunia.com/advisories/30898 - http://secunia.com/advisories/31403 - http://wiki.rpath.com/Advisories:rPSA-2008-0216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9432 - https://issues.rpath.com/browse/RPL-2646 - http://secunia.com/advisories/30949 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisori
ity&y=2008&m=slackware-security.383152 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/31069 - http://secunia.com/advisories/31008 - http://secunia.com/advisories/31377 - http://rhn.redhat.com/errata/RHSA-2008-0616.html - http://www.vupen.com/english/advisories/2008/1993/references - http://secunia.com/advisories/31023 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 - http://www.securityfocus.com/bid/30038 - http://www.debian.org/security/2008/dsa-1607 - http://security.gentoo.org/glsa/glsa-200808-03.xml - http://secunia.com/advisories/31005 - http://secunia.com/advisories/33433 - https://www.redhat.com/archives/fedora-package-announce/20