FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-5503

This CVE name corresponds to:

Entered Topic
2008-12-19 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2008-5503
Phase Assigned(20081212)

Description

The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.

References

Source Reference
MISC https://bugzilla.mozilla.org/show_bug.cgi?id=379959
CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-61.html
DEBIAN DSA-1697
DEBIAN DSA-1704
DEBIAN DSA-1707
DEBIAN DSA-1696
MANDRIVA MDVSA-2009:012
MANDRIVA MDVSA-2008:244
REDHAT RHSA-2008:1037
REDHAT RHSA-2009:0002
SUNALERT 256408
SUNALERT 258748
UBUNTU USN-690-2
UBUNTU USN-690-3
UBUNTU USN-701-1
UBUNTU USN-701-2
BID 32882
OVAL oval:org.mitre.oval:def:11423
SECTRACK 1021424
SECUNIA 33231
SECUNIA 33433
SECUNIA 33232
SECUNIA 33523
SECUNIA 33547
SECUNIA 33184
SECUNIA 33189
SECUNIA 33204
SECUNIA 33205
SECUNIA 33421
SECUNIA 33434
SECUNIA 34501
SECUNIA 35080
SECUNIA 33408
SECUNIA 33415
VUPEN ADV-2009-0977
XF mozilla-xbl-information-disclosure(47409)