CVE-2008-5019: XSS
The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability severity of CVE-2008-5019?
CVE-2008-5019 is considered to be of high severity due to its potential to allow cross-site scripting (XSS) attacks.
How can I mitigate CVE-2008-5019?
Mitigation for CVE-2008-5019 involves upgrading to Mozilla Firefox versions 3.0.4 or later, or 2.0.0.18 or later.
What types of attacks can CVE-2008-5019 enable?
CVE-2008-5019 can enable remote attackers to conduct cross-site scripting (XSS) attacks by violating the same origin policy.
Which versions of Firefox are affected by CVE-2008-5019?
CVE-2008-5019 affects Mozilla Firefox versions 3.x before 3.0.4 and 2.x before 2.0.0.18.
Is any Linux distribution affected by CVE-2008-5019?
Yes, several versions of Ubuntu and Debian Linux are affected by CVE-2008-5019 due to their inclusion of vulnerable Firefox versions.