CVE-2008-4059: High severity firefox vulnerability
Published Sep 24, 2008
·Updated
The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element.
Affected Software
65 affected components
Mozilla Firefox=0.9_rc
Mozilla Firefox=0.8
Mozilla Firefox=2.0.0.12
Mozilla Firefox=1.5-beta2
Mozilla Firefox=1.5.2
Mozilla Firefox=1.5.0.6
Mozilla Firefox=1.8
Mozilla Firefox=2.0.0.2
Mozilla Firefox=1.5.0.10
Mozilla Firefox=1.5.0.3
Mozilla Firefox=1.5.0.11
Mozilla Firefox=1.5.4
Mozilla Firefox=1.0.2
Mozilla Firefox=1.5-beta1
Mozilla Firefox=1.5
Mozilla Firefox=0.9.1
Mozilla Firefox=1.0.4
Mozilla Firefox=2.0.0.7
Mozilla Firefox=1.0.7
Mozilla Firefox=2.0.0.9
Mozilla Firefox=0.10.1
Mozilla Firefox
Mozilla Firefox=0.9
Mozilla Firefox=2.0.0.16
Mozilla Firefox=1.5.6
Mozilla Firefox=2.0.0.15
Mozilla Firefox=1.0
Mozilla Firefox=1.5.0.7
Mozilla Firefox=2.0
Mozilla Firefox=1.0.1
Mozilla Firefox=2.0-beta1
Mozilla Firefox=2.0.0.14
Mozilla Firefox=1.5.0.8
Mozilla Firefox=1.0.6
Mozilla Firefox=2.0.0.3
Mozilla Firefox=1.5.0.9
Mozilla Firefox=1.5.0.5
Mozilla Firefox=1.5.7
Mozilla Firefox=1.5.0.12
Mozilla Firefox=2.0.0.6
Mozilla Firefox=2.0.0.11
Mozilla Firefox=1.5.0.2
Mozilla Firefox=1.0.3
Mozilla Firefox=2.0.0.4
Mozilla Firefox=1.5.1
Mozilla Firefox=0.9.3
Mozilla Firefox=2.0.0.13
Mozilla Firefox=2.0-rc2
Mozilla Firefox=2.0.0.1
Mozilla Firefox=1.5.5
Mozilla Firefox=0.9.2
Mozilla Firefox=2.0.0.8
Mozilla Firefox<=2.0.0.17
Mozilla Firefox=0.9-rc
Mozilla Firefox=1.5.8
Mozilla Firefox=1.5.3
Mozilla Firefox=1.5.0.4
Mozilla Firefox=1.5.0.1
Mozilla Firefox=0.10
Mozilla Firefox=1.0.5
Mozilla Firefox=2.0.0.5
Mozilla Firefox=2.0.0.10
Mozilla Firefox=2.0-rc3
Mozilla Firefox=1.0.6
Mozilla Firefox=1.0.8
Remediation
Patch Available
Event History
Sep 24, 2008
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-4059?
CVE-2008-4059 is considered a high-severity vulnerability due to its potential for arbitrary code execution with chrome privileges.
2
How do I fix CVE-2008-4059?
To fix CVE-2008-4059, you should upgrade to the latest version of Mozilla Firefox beyond 2.0.0.17.
3
Who is affected by CVE-2008-4059?
CVE-2008-4059 affects all versions of Mozilla Firefox prior to 2.0.0.17.
4
What is the impact of CVE-2008-4059?
The impact of CVE-2008-4059 allows attackers to execute arbitrary code, compromising the security of the affected system.
5
How can I determine if I am vulnerable to CVE-2008-4059?
You can determine your vulnerability to CVE-2008-4059 by checking your Firefox version and confirming it is below 2.0.0.17.