CVE-2008-4058: High severity firefox vulnerability
The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4058?
CVE-2008-4058 has a high severity rating due to its ability to allow remote code execution with chrome privileges.
How do I fix CVE-2008-4058?
To fix CVE-2008-4058, users should upgrade to the latest version of affected software, such as Firefox 2.0.0.17, Thunderbird 2.0.0.17, or SeaMonkey 1.1.12.
What products are vulnerable to CVE-2008-4058?
CVE-2008-4058 affects Mozilla Firefox versions before 2.0.0.17 and 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12.
Can CVE-2008-4058 be exploited remotely?
Yes, CVE-2008-4058 can be exploited remotely, allowing attackers to execute arbitrary code.
Is CVE-2008-4058 still relevant today?
While CVE-2008-4058 was significant during its time, it is less relevant now due to the discontinuation of affected products and the availability of security updates.