The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.
2008-07-07T23:41:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | mozilla | firefox | ≤ 2.0.0.14 | Yes |
Application | mozilla | firefox | 2.0 | Yes |
Application | mozilla | firefox | 2.0.0.1 | Yes |
Application | mozilla | firefox | 2.0.0.2 | Yes |
Application | mozilla | firefox | 2.0.0.3 | Yes |
Application | mozilla | firefox | 2.0.0.4 | Yes |
Application | mozilla | firefox | 2.0.0.5 | Yes |
Application | mozilla | firefox | 2.0.0.6 | Yes |
Application | mozilla | firefox | 2.0.0.7 | Yes |
Application | mozilla | firefox | 2.0.0.8 | Yes |
Application | mozilla | firefox | 2.0.0.9 | Yes |
Application | mozilla | firefox | 2.0.0.10 | Yes |
Application | mozilla | firefox | 2.0.0.11 | Yes |
Application | mozilla | firefox | 2.0.0.12 | Yes |
Application | mozilla | firefox | 2.0.0.13 | Yes |
Application | mozilla | seamonkey | ≤ 1.1.9 | Yes |
Application | mozilla | seamonkey | 1.1 | Yes |
Application | mozilla | seamonkey | 1.1.2 | Yes |
Application | mozilla | seamonkey | 1.1.3 | Yes |
Application | mozilla | seamonkey | 1.1.4 | Yes |
Application | mozilla | seamonkey | 1.1.5 | Yes |
Application | mozilla | seamonkey | 1.1.6 | Yes |
Application | mozilla | seamonkey | 1.1.7 | Yes |
Application | mozilla | seamonkey | 1.1.8 | Yes |
Application | mozilla | thunderbird | ≤ 2.0.0.14 | Yes |
Application | mozilla | thunderbird | 2.0.0.0 | Yes |
Application | mozilla | thunderbird | 2.0.0.1 | Yes |
Application | mozilla | thunderbird | 2.0.0.2 | Yes |
Application | mozilla | thunderbird | 2.0.0.3 | Yes |
Application | mozilla | thunderbird | 2.0.0.4 | Yes |
Application | mozilla | thunderbird | 2.0.0.5 | Yes |
Application | mozilla | thunderbird | 2.0.0.6 | Yes |
Application | mozilla | thunderbird | 2.0.0.8 | Yes |
Application | mozilla | thunderbird | 2.0.0.9 | Yes |
Application | mozilla | thunderbird | 2.0.0.11 | Yes |
Application | mozilla | thunderbird | 2.0.0.12 | Yes |
Application | mozilla | thunderbird | 2.0.0.13 | Yes |