CVE-2008-3835: High severity mozilla seamonkey vulnerability
Published Sep 24, 2008
·Updated
The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
Affected Software
132 affected components
Mozilla SeaMonkey=1.1.10
Mozilla SeaMonkey
Mozilla Thunderbird=1.5.0.7
Mozilla Firefox=0.9_rc
Mozilla Thunderbird=0.6
Mozilla SeaMonkey=1.0.3
Mozilla Firefox=0.8
Mozilla Firefox=2.0.0.12
Mozilla Thunderbird=0.7.2
Mozilla Firefox=1.5-beta2
Mozilla Thunderbird=2.0.0.4
Mozilla Firefox=1.5.2
Mozilla SeaMonkey=1.0.1
Mozilla Thunderbird=2.0.0.6
Mozilla SeaMonkey=1.0.6
Mozilla Firefox=1.5.0.6
Mozilla Firefox=1.8
Mozilla SeaMonkey=1.0.9
Mozilla Thunderbird=0.3
Mozilla Firefox=1.5.0.10
Mozilla Firefox=1.5.0.3
Mozilla Thunderbird=0.2
Mozilla SeaMonkey=1.0
Mozilla Thunderbird=2.0_.5
Mozilla Thunderbird=1.0.7
Mozilla Firefox=1.5.0.11
Mozilla Firefox<=2.0.0.16
Mozilla SeaMonkey=1.0.99
Mozilla Thunderbird=2.0.0.9
Mozilla Firefox=1.5.4
Mozilla Thunderbird<=2.0.0.16
Mozilla SeaMonkey=1.0.7
Mozilla Firefox=1.0.2
Mozilla SeaMonkey=1.0-beta
Mozilla Thunderbird=2.0_.12
Mozilla Thunderbird=2.0.0.15
Mozilla Firefox=1.5-beta1
Mozilla Thunderbird=2.0.0.8
Mozilla Thunderbird=1.7.1
Mozilla Thunderbird=2.0_8
Mozilla Firefox=1.5
Mozilla Thunderbird=1.5.0.3
Mozilla Firefox=0.9.1
Mozilla Thunderbird=1.5.0.10
Mozilla Firefox=1.0.4
Mozilla Firefox=1.0.7
Mozilla Thunderbird=1.5.0.6
Mozilla SeaMonkey=1.1
Mozilla Firefox=0.10.1
Mozilla Thunderbird=1.0
Mozilla Thunderbird=2.0.0.3
Mozilla Firefox=0.9
Mozilla Thunderbird=1.0.1
Mozilla Thunderbird=1.5-beta2
Mozilla Firefox=1.5.6
Mozilla Thunderbird=2.0.0.2
Mozilla Thunderbird
Mozilla Firefox=2.0.0.15
Mozilla SeaMonkey=1.0
Mozilla SeaMonkey=1.0.2
Mozilla SeaMonkey=1.0.8
Mozilla Thunderbird=1.0.2
Mozilla Thunderbird=2.0.0.0
Mozilla Firefox=1.0
Mozilla SeaMonkey=1.1.1
Mozilla Firefox=1.5.0.7
Mozilla Thunderbird=2.0.0.12
Mozilla Firefox=2.0
Mozilla Thunderbird=1.5
Mozilla Firefox=1.0.1
Mozilla Thunderbird=1.5.0.2
Mozilla Firefox=2.0.0.14
Mozilla Thunderbird=2.0.0.13
Mozilla SeaMonkey<=1.1.11
Mozilla SeaMonkey=1.0.5
Mozilla Thunderbird=2.0_.9
Mozilla Thunderbird=1.5.0.8
Mozilla Thunderbird=2.0.0.14
Mozilla Firefox=1.5.0.8
Mozilla Thunderbird=0.5
Mozilla Thunderbird=1.0.4
Mozilla Thunderbird=1.5.2
Mozilla Firefox=1.5.0.9
Mozilla Firefox=1.5.0.5
Mozilla Firefox=1.5.7
Mozilla Firefox=1.5.0.12
Mozilla Thunderbird=1.5.0.9
Mozilla Thunderbird=1.5.0.11
Mozilla Thunderbird=0.9
Mozilla Thunderbird=1.0.3
Mozilla Thunderbird=2.0.0.11
Mozilla Thunderbird=2.0_.13
Mozilla Firefox=2.0.0.11
Mozilla Firefox=1.5.0.2
Mozilla Firefox=1.0.3
Mozilla Firefox=1.5.1
Mozilla Thunderbird=2.0_.14
Mozilla Thunderbird=0.7.3
Mozilla Firefox=0.9.3
Mozilla Firefox=2.0.0.13
Mozilla Thunderbird=0.4
Mozilla SeaMonkey=1.0
Mozilla Thunderbird=1.5.1
Mozilla Thunderbird=0.7
Mozilla Firefox=2.0.0.1
Mozilla Thunderbird=1.0.6
Mozilla Thunderbird=1.0.5-beta
Mozilla Thunderbird=2.0.0.5
Mozilla Thunderbird=1.7.3
Mozilla SeaMonkey=1.0.4
Mozilla Firefox=1.5.5
Mozilla Firefox=0.9.2
Mozilla Thunderbird=2.0.0.1
Mozilla Thunderbird=1.5.0.1
Mozilla Thunderbird=2.0_.4
Mozilla Thunderbird=1.0.8
Mozilla Thunderbird=0.1
Mozilla Firefox=0.9-rc
Mozilla Firefox=1.5.8
Mozilla Firefox=1.5.3
Mozilla Thunderbird=0.7.1
Mozilla Thunderbird=1.0.5
Mozilla Thunderbird=0.8
Mozilla Firefox=1.5.0.4
Mozilla Firefox=1.5.0.1
Mozilla Firefox=0.10
Mozilla Thunderbird=2.0_.6
Mozilla Firefox=1.0.5
Mozilla Firefox=2.0.0.10
Mozilla Firefox=1.0.6
Mozilla Thunderbird=1.5.0.4
Mozilla Firefox=1.0.8
Event History
Sep 24, 2008
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3835?
CVE-2008-3835 has a severity rating that indicates it allows remote code execution due to Same Origin Policy bypass.
2
How do I fix CVE-2008-3835?
To fix CVE-2008-3835, upgrade to a version of Firefox, Thunderbird, or SeaMonkey that is 2.0.0.17 or newer.
3
Which software is affected by CVE-2008-3835?
CVE-2008-3835 affects Mozilla Firefox versions prior to 2.0.0.17, Thunderbird versions before 2.0.0.17, and SeaMonkey versions prior to 1.1.12.
4
What does CVE-2008-3835 exploit?
CVE-2008-3835 exploits the nsXMLDocument::OnChannelRedirect function to execute arbitrary JavaScript code remotely.
5
Can CVE-2008-3835 lead to data breaches?
Yes, CVE-2008-3835 can lead to data breaches as it allows execution of arbitrary JavaScript which could access sensitive information.