CVE-2008-2803: Medium severity firefox vulnerability
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2803?
CVE-2008-2803 is considered a moderate severity vulnerability that can allow remote attackers to execute arbitrary code.
How do I fix CVE-2008-2803?
To fix CVE-2008-2803, update Mozilla Firefox to version 2.0.0.15 or later, Thunderbird to version 2.0.0.15 or later, or SeaMonkey to version 1.1.10 or later.
What versions are affected by CVE-2008-2803?
CVE-2008-2803 affects Mozilla Firefox versions before 2.0.0.15, Thunderbird versions before 2.0.0.14, and SeaMonkey versions before 1.1.10.
What type of vulnerability is CVE-2008-2803?
CVE-2008-2803 is a script execution vulnerability due to the lack of security checks in the loading of scripts from certain URIs.
Can CVE-2008-2803 be exploited by local attackers?
CVE-2008-2803 primarily allows remote attackers to exploit it via specially crafted scripts, but local exploitation could also be possible under certain conditions.