CVE-2008-5504: High severity Mozilla Firefox vulnerability
Published Dec 17, 2008
·Updated
Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.
Affected Software
19 affected components
Mozilla Firefox=2.0.0.12
Mozilla Firefox=2.0.0.2
Mozilla Firefox=2.0.0.7
Mozilla Firefox=2.0.0.9
Mozilla Firefox=2.0.0.16
Mozilla Firefox=2.0.0.17
Mozilla Firefox=2.0.0.15
Mozilla Firefox=2.0
Mozilla Firefox=2.0.0.14
Mozilla Firefox=2.0.0.3
Mozilla Firefox=2.0.0.6
Mozilla Firefox=2.0.0.11
Mozilla Firefox=2.0.0.4
Mozilla Firefox=2.0.0.13
Mozilla Firefox=2.0.0.1
Mozilla Firefox=2.0.0.8
Mozilla Firefox<=2.0.0.18
Mozilla Firefox=2.0.0.5
Mozilla Firefox=2.0.0.10
Event History
Dec 17, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5504?
CVE-2008-5504 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2008-5504?
To fix CVE-2008-5504, users should update Mozilla Firefox to version 2.0.0.19 or later.
3
Who is affected by CVE-2008-5504?
CVE-2008-5504 affects Mozilla Firefox versions 2.0.0.18 and earlier.
4
What does CVE-2008-5504 allow attackers to do?
CVE-2008-5504 allows remote attackers to execute arbitrary JavaScript with chrome privileges.
5
Is CVE-2008-5504 related to other vulnerabilities?
Yes, CVE-2008-5504 is a different vulnerability than CVE-2008-3836.