CVE-2008-5507: Infoleak
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5507?
CVE-2008-5507 has a severity rating that allows remote attackers to bypass the same-origin policy.
How do I fix CVE-2008-5507?
To fix CVE-2008-5507, update Mozilla Firefox, Thunderbird, or SeaMonkey to versions above the vulnerable ones specified in the advisory.
Which versions are affected by CVE-2008-5507?
CVE-2008-5507 affects Mozilla Firefox versions 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird before 2.0.0.19, and SeaMonkey before 1.1.14.
What kind of attack is CVE-2008-5507 associated with?
CVE-2008-5507 is associated with JavaScript URL redirection that allows for unauthorized data access from another domain.
Is CVE-2008-5507 a local or remote vulnerability?
CVE-2008-5507 is a remote vulnerability that can be exploited by attackers over the internet.