Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0412 State: PUBLISHED Published: 2008-02-08T21:00:00 Last Updated: 2024-08-07T07:46:54.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors
5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0104.html - http://www.ubuntu.com/usn/usn-582-2 - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/28939 - http://www.debian.org/security/2008/dsa-1506 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399 - https://issues.rpath.com/browse/RPL-1995 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html - https://www.redhat.co
e/RPL-1995 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://secunia.com/advisories/28766 - http://secunia.com/advisories/28818 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://secunia.com/advisories/29049 - http://www.vupen.com/english/advisories/2008/0453/references - http://www.redhat.com/support/errata/RHSA-2008-0103.html - http://secunia.com/advisories/28877 - http://secunia.com/advisories/28879 - http://www.ubuntu.com/usn/usn-582-1 - http://secunia.com/advisories/2916
s/28877 - http://secunia.com/advisories/28879 - http://www.ubuntu.com/usn/usn-582-1 - http://secunia.com/advisories/29167 - http://secunia.com/advisories/29567 - http://www.redhat.com/support/errata/RHSA-2008-0105.html - http://secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http://www.debian.org/security/2008/dsa-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.co
s.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/29086 - http://secunia.com/advisories/28815 - http://www.vupen.com/english/advisories/2008/0454/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/28864 - http://www.debian.org/security/2008/dsa-1485 - http://secunia.com/advisories/28924 - http://www.securityfocus.com/bid/27683 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.securitytracker.com/id?1019320 - http://www.mozilla.org/security/announce/2008/mfsa2008-01.html - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http
http://www.mozilla.org/security/announce/2008/mfsa2008-01.html - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088%2C393141%2C364801%2C346405%2C396613%2C394337%2C406290 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html - http://secunia.com/advisories/29164 - http://secunia.com/advisories/29211 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.mandriva.com/security/ad
unce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:062 - http://www.debian.org/security/2008/dsa-1484 - http://secunia.com/advisories/28808 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10573 - http://secunia.com/advisories/28754 - http://secunia.com/advisories/28758 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com
ounce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com/advisories/31043 - http://secunia.com/advisories/29098 - http://secunia.com/advisories/28839
CVE ID: CVE-2008-0413 State: PUBLISHED Published: 2008-02-08T21:00:00 Last Updated: 2024-08-07T07:46:54.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0104.html - http://www.ubuntu.com/usn/usn-582-2 - http://www.ubuntu
es: - http://www.redhat.com/support/errata/RHSA-2008-0104.html - http://www.ubuntu.com/usn/usn-582-2 - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/28939 - http://www.debian.org/security/2008/dsa-1506 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399 - https://issues.rpath.com/browse/RPL-1995 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://secunia.com/advisories/28766 - http://secunia.com/advi
l - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://secunia.com/advisories/28766 - http://secunia.com/advisories/28818 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://secunia.com/advisories/29049 - http://www.vupen.com/english/advisories/2008/0453/references - http://www.redhat.com/support/errata/RHSA-2008-0103.html - http://secunia.com/advisories/28877 - http://secunia.com/advisories/28879 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720%2C390597%2C373344%2C398085%2C406572%2C391028%2C406036%2C402087 - http://www.ubuntu.com/usn/usn-582-1 - http://secunia.com/advisories/29167 - http://www.redhat.com/support/errata/RHSA-2008-0105.html
untu.com/usn/usn-582-1 - http://secunia.com/advisories/29167 - http://www.redhat.com/support/errata/RHSA-2008-0105.html - http://secunia.com/advisories/28958 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http://www.debian.org/security/2008/dsa-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/29086 - http://secunia.com/advisories/28815 - http://www.vupen.com/english/advisories/2008/0454/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-23
tp://www.vupen.com/english/advisories/2008/0454/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/28864 - http://www.debian.org/security/2008/dsa-1485 - http://secunia.com/advisories/28924 - http://www.securityfocus.com/bid/27683 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.mozilla.org/security/announce/2008/mfsa2008-01.html - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http://www.vupen.com/english/advisories/2008/2091/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10385 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.h
definition/oval%3Aorg.mitre.oval%3Adef%3A10385 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html - http://secunia.com/advisories/29164 - http://secunia.com/advisories/29211 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:062 - http://www.debian.org/security/2008/dsa-1484 - http://secunia.com/advisories/28808 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.securitytracker.com/id?1019321 - http://www.gentoo.
//www.vupen.com/english/advisories/2008/0627/references - http://www.securitytracker.com/id?1019321 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/advisories/28754 - http://secunia.com/advisories/28758 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com/advisories/31043 - http://secunia.com/advisories/29098 - http://secunia.com/advisories/28839
CVE ID: CVE-2008-0414 State: PUBLISHED Published: 2008-02-08T21:00:00 Last Updated: 2024-08-07T07:46:54.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/28939 - http://www.debian.org/security/2008/dsa-1506 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - h
://www.debian.org/security/2008/dsa-1506 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://secunia.com/advisories/29049 - http://www.vupen.com/english/advisories/2008/0453/references - http://secunia.com/advisories/28877 - http://secunia.com/advisories/28879 - http://secunia.com/advisories/29567 - http://secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.debian.org/security/2008/dsa-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/a
g/security/2008/dsa-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/29086 - http://secunia.com/advisories/28815 - http://secunia.com/advisories/28864 - http://www.debian.org/security/2008/dsa-1485 - http://secunia.com/advisories/28924 - http://www.securityfocus.com/bid/27683 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.mozilla.org/security/announce/2008/mfsa2008-02.html - https://bugzilla.mozilla.org/buglist.cgi?bug_id=404451%2C408034%2C404391%2C405299 - http://www.securitytracker.com/id?1019330 - http://lists.opensuse.org/opensuse-security-announc
8034%2C404391%2C405299 - http://www.securitytracker.com/id?1019330 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.debian.org/security/2008/dsa-1484 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/advisories/28758 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advis
s://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com/advisories/28839
CVE ID: CVE-2008-0415 State: PUBLISHED Published: 2008-02-08T21:00:00 Last Updated: 2024-08-07T07:46:54.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0104.html - http://www.ubuntu.com/usn/usn-582-2 - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.c
A-2008-0104.html - http://www.ubuntu.com/usn/usn-582-2 - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/28939 - http://www.debian.org/security/2008/dsa-1506 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399 - https://issues.rpath.com/browse/RPL-1995 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://secunia.com/advisories/28766 - http://secunia.com/advisories/28818 - http://secunia.com/advisories/3
-2008-0093 - http://secunia.com/advisories/28766 - http://secunia.com/advisories/28818 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://secunia.com/advisories/29049 - http://www.vupen.com/english/advisories/2008/0453/references - http://www.redhat.com/support/errata/RHSA-2008-0103.html - http://secunia.com/advisories/28877 - http://secunia.com/advisories/28879 - http://www.ubuntu.com/usn/usn-582-1 - http://secunia.com/advisories/29167 - http://secunia.com/advisories/29567 - http://www.redhat.com/support/errata/RHSA-2008-0105.html - http://secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http:/
/secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http://www.debian.org/security/2008/dsa-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/29086 - http://secunia.com/advisories/28815 - http://www.vupen.com/english/advisories/2008/0454/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/28864 -
4/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/28864 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695%2C393761%2C393762%2C399298%2C407289%2C372075%2C363597 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9897 - http://www.debian.org/security/2008/dsa-1485 - http://secunia.com/advisories/28924 - http://www.securityfocus.com/bid/27683 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.mozilla.org/security/announce/2008/mfsa2008-03.html - http://www.securitytracker.com/id?1019327 - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http://www.vupen.com/engli
http://www.securitytracker.com/id?1019327 - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html - http://secunia.com/advisories/29164 - http://secunia.com/advisories/29211 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:062 - http://www.debian.org/security/2008/dsa-1484 - http://secunia.com/advisories/28808 - http://www.vupen.
=MDVSA-2008:062 - http://www.debian.org/security/2008/dsa-1484 - http://secunia.com/advisories/28808 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/advisories/28754 - http://secunia.com/advisories/28758 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com/advisories/31043 - http://secunia.com/advisories/29098 - http://secunia.com/advisories/28839
CVE ID: CVE-2008-0416 State: PUBLISHED Published: 2008-02-12T02:00:00 Last Updated: 2024-08-07T07:46:54.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) "zero-length non-ASCII sequences" in certain Asian character sets. Additional Analyst Notes: - CVE Program Container: References: - http://www.turbolinux.com/security/2008/TLSA-2008-9.
s. Additional Analyst Notes: - CVE Program Container: References: - http://www.turbolinux.com/security/2008/TLSA-2008-9.txt - http://secunia.com/advisories/29541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40488 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://secunia.com/advisories/28879 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://www.debian.org/security/2008/dsa-1489 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/28864 - ht
/dsa-1489 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/28864 - http://www.debian.org/security/2008/dsa-1485 - http://www.vupen.com/english/advisories/2008/1793/references - https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161 - http://www.vupen.com/english/advisories/2008/2091/references - http://jvn.jp/en/jp/JVN21563357/index.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://www.mozilla.org/security/announce/2008/mfsa2008-13.html - http://www.debian.org/security/2008/dsa-1484 - http://www.securityfocus.com/bid/29303 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/ad
tp://www.securityfocus.com/bid/29303 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/advisories/31043 - http://secunia.com/advisories/28839 - https://usn.ubuntu.com/576-1/
CVE ID: CVE-2008-0417 State: PUBLISHED Published: 2008-02-08T21:00:00 Last Updated: 2024-08-07T07:46:54.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0104.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11154 - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - http://secunia.co
oval%3Adef%3A11154 - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/28939 - http://www.debian.org/security/2008/dsa-1506 - http://secunia.com/advisories/28766 - http://secunia.com/advisories/28818 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://www.vupen.com/english/advisories/2008/0453/references - http://www.redhat.com/support/errata/RHSA-2008-0103.html - http://secunia.com/advisories/28877 - http://secunia.com/advisories/28879 - http://secunia.com/advisories/29567 - http://secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http
://secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.debian.org/security/2008/dsa-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/29086 - http://www.securitytracker.com/id?1019334 - http://secunia.com/advisories/28864 - http://www.debian.org/security/2008/dsa-1485 - http://secunia.com/advisories/28924 - http://www.securityfocus.com/bid/27683 - http://www.mozilla.org/security/announce/2008/mfsa2008-04.h
/advisories/28924 - http://www.securityfocus.com/bid/27683 - http://www.mozilla.org/security/announce/2008/mfsa2008-04.html - http://www.vupen.com/english/advisories/2008/1793/references - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=394610 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.debian.org/security/2008/dsa-1484 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-2008
a-1484 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com/advisories/28839
CVE ID: CVE-2008-0418 State: PUBLISHED Published: 2008-02-08T21:00:00 Last Updated: 2024-08-07T07:46:54.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0104.html - http://www.ubuntu.com/usn/usn-582-2 - http://www.securitytracker.com/id?101
hat.com/support/errata/RHSA-2008-0104.html - http://www.ubuntu.com/usn/usn-582-2 - http://www.securitytracker.com/id?1019329 - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/28939 - http://www.debian.org/security/2008/dsa-1506 - http://www.kb.cert.org/vuls/id/309608 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399 - https://issues.rpath.com/browse/RPL-1995 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093