CVE-2008-5913: Medium severity Mozilla Firefox vulnerability
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5913?
CVE-2008-5913 is classified as a high-severity vulnerability due to its potential for user tracking and phishing attacks.
How do I fix CVE-2008-5913?
To fix CVE-2008-5913, update Mozilla Firefox to version 3.5.10 or later, or upgrade to version 3.6.4 or later.
What software is affected by CVE-2008-5913?
CVE-2008-5913 affects several versions of Mozilla Firefox prior to 3.5.10 and 3.6.4, as well as SeaMonkey versions before 2.0.5.
What attack vectors are associated with CVE-2008-5913?
CVE-2008-5913 allows remote attackers to track users or conduct phishing attacks by exploiting weaknesses in the Math.random function.
Is there a workaround for CVE-2008-5913?
There are no recommended workarounds for CVE-2008-5913; the best solution is to update the affected software.