Description
Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."
References (51)
Core 51
Core References
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:155
Vendor Advisory vendor-advisory
x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
Vendor Advisory vendor-advisory
x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1
Vendor Advisory vendor-advisory
x_refsource_slackware
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/490196/100/0/threaded
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29541
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29539
Patch, Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2008/mfsa2008-14.html
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0999/references
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30620
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29560
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2008/dsa-1532
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41457
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30327
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-592-1
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29616
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1019694
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29550
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29645
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-605-1
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29607
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1793/references
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2008/dsa-1574
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29558
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29548
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30370
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2008-0208.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29526
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2091/references
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA08-087A.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29391
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30192
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/466521
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0209.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/28448
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0207.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30016
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2008/dsa-1534
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29547
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30105
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30094
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/31043
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0998/references
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2008/dsa-1535
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
Scores
EPSS
0.0605
EPSS Percentile
92.6%
Details
Status
published
Products (49)
mozilla/firefox
0.1
mozilla/firefox
0.2
mozilla/firefox
0.4
mozilla/firefox
0.5
mozilla/firefox
0.6
mozilla/firefox
0.6.1
mozilla/firefox
0.7
mozilla/firefox
0.7.1
mozilla/firefox
0.8
mozilla/firefox
0.9
... and 39 more
Published
Mar 27, 2008
Tracked Since
Feb 18, 2026