CVE-2008-2808: XSS

Published Jul 7, 2008

Updated

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.

Affected Software

64 affected components

redhat Advanced Workstation For The Itanium Processor=2.1

redhat Desktop=3.0

redhat Desktop=4.0

redhat Enterprise Linux=5_server

redhat Enterprise Linux=as_2.1

redhat Enterprise Linux=as_3

redhat Enterprise Linux=as_4

redhat Enterprise Linux=es_2.1

redhat Enterprise Linux=es_3

redhat Enterprise Linux=es_4

redhat Enterprise Linux=ws_2.1

redhat Enterprise Linux=ws_3

redhat Enterprise Linux=ws_4

redhat Enterprise Linux Desktop=5_client

redhat Enterprise Linux Desktop Workstation=5_client

redhat Fedora=8

Ubuntu Ubuntu Linux=6.06

Ubuntu Ubuntu Linux=7.04

Ubuntu Ubuntu Linux=7.10

Mozilla Firefox=2.0

Mozilla Firefox=2.0-beta_1

Mozilla Firefox=2.0-rc2

Mozilla Firefox=2.0-rc3

Mozilla Firefox=2.0.0.2

Mozilla Firefox=2.0.0.3

Mozilla Firefox=2.0.0.11

Mozilla Firefox=2.0.0.12

Mozilla Firefox=2.0.0.13

Mozilla Firefox=2.0.0.14

Mozilla Firefox=2.0_.1

Mozilla Firefox=2.0_.4

Mozilla Firefox=2.0_.5

Mozilla Firefox=2.0_.6

Mozilla Firefox=2.0_.9

Mozilla Firefox=2.0_.10

Mozilla Firefox=2.0_8

Mozilla SeaMonkey=1.1-beta

Mozilla SeaMonkey=1.1.1

Mozilla SeaMonkey=1.1.2

Mozilla SeaMonkey=1.1.3

Mozilla SeaMonkey=1.1.4

Mozilla SeaMonkey=1.1.5

Mozilla SeaMonkey=1.1.6

Mozilla SeaMonkey=1.1.7

Mozilla SeaMonkey=1.1.8

Mozilla SeaMonkey=1.1.9

Mozilla Thunderbird=2.0_.4

Mozilla Thunderbird=2.0_.5

Mozilla Thunderbird=2.0_.6

Mozilla Thunderbird=2.0_.9

Mozilla Thunderbird=2.0_.12

Mozilla Thunderbird=2.0_.13

Mozilla Thunderbird=2.0_.14

Mozilla Thunderbird=2.0_8

Event History

Jul 7, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Data Sourced

11:41 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-2808?

CVE-2008-2808 is classified as a moderate severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2008-2808?

To fix CVE-2008-2808, upgrade to Mozilla Firefox version 2.0.0.15 or later and SeaMonkey version 1.1.10 or later.

What versions are affected by CVE-2008-2808?

CVE-2008-2808 affects Mozilla Firefox versions before 2.0.0.15 and SeaMonkey versions before 1.1.10.

Can CVE-2008-2808 lead to data exposure?

Yes, CVE-2008-2808 can exploit vulnerabilities that may lead to unauthorized access to sensitive data through XSS attacks.

What exploitation methods are associated with CVE-2008-2808?

CVE-2008-2808 allows attackers to conduct cross-site scripting (XSS) attacks via crafted file:// URLs.