CVE-2008-4723

Mozilla Firefox - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a (1) JPG, (2) PDF, or (3) TXT file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (1)

[Exploit] http://www.securityfocus.com/bid/31855

Scores

EPSS 0.0021

EPSS Percentile 43.1%

Classification

CWE

CWE-79

Status published

Affected Products (4)

mozilla/firefox

n/a/n/a

Timeline

Published Oct 23, 2008

Tracked Since Feb 18, 2026