CVE-2008-0593: Infoleak
Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0593?
CVE-2008-0593 is classified as a medium severity vulnerability due to its potential to bypass the Same Origin Policy.
How do I fix CVE-2008-0593?
To mitigate CVE-2008-0593, users should update their Mozilla Firefox to version 2.0.0.12 or higher or SeaMonkey to version 1.1.8 or higher.
What systems are affected by CVE-2008-0593?
CVE-2008-0593 affects Gecko-based browsers, specifically Mozilla Firefox versions before 2.0.0.12 and SeaMonkey versions before 1.1.8.
What does CVE-2008-0593 exploit?
CVE-2008-0593 exploits the mishandling of the .href property of stylesheet DOM nodes to allow cross-origin information leakage.
Is there a workaround for CVE-2008-0593?
A reliable workaround for CVE-2008-0593 is to disable certain browser features or use alternative browsers that are not affected.