Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-2808

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.

Published

2008-07-07T23:41:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System redhat advanced_workstation_for_the_itanium_processor 2.1 No
Operating System redhat desktop 3.0 No
Operating System redhat desktop 4.0 No
Operating System redhat enterprise_linux 5_server No
Operating System redhat enterprise_linux as_2.1 No
Operating System redhat enterprise_linux as_3 No
Operating System redhat enterprise_linux as_4 No
Operating System redhat enterprise_linux es_2.1 No
Operating System redhat enterprise_linux es_3 No
Operating System redhat enterprise_linux es_4 No
Operating System redhat enterprise_linux ws_2.1 No
Operating System redhat enterprise_linux ws_3 No
Operating System redhat enterprise_linux ws_4 No
Operating System redhat enterprise_linux_desktop 5_client No
Operating System redhat enterprise_linux_desktop_workstation 5_client No
Operating System redhat fedora 8 No
Operating System ubuntu ubuntu_linux 6.06 No
Operating System ubuntu ubuntu_linux 6.06 No
Operating System ubuntu ubuntu_linux 6.06 No
Operating System ubuntu ubuntu_linux 6.06 No
Operating System ubuntu ubuntu_linux 7.04 No
Operating System ubuntu ubuntu_linux 7.04 No
Operating System ubuntu ubuntu_linux 7.04 No
Operating System ubuntu ubuntu_linux 7.04 No
Operating System ubuntu ubuntu_linux 7.10 No
Operating System ubuntu ubuntu_linux 7.10 No
Operating System ubuntu ubuntu_linux 7.10 No
Operating System ubuntu ubuntu_linux 7.10 No
Operating System ubuntu ubuntu_linux 7.10 No
Application mozilla firefox 2.0 Yes
Application mozilla firefox 2.0 Yes
Application mozilla firefox 2.0 Yes
Application mozilla firefox 2.0 Yes
Application mozilla firefox 2.0.0.2 Yes
Application mozilla firefox 2.0.0.3 Yes
Application mozilla firefox 2.0.0.11 Yes
Application mozilla firefox 2.0.0.12 Yes
Application mozilla firefox 2.0.0.13 Yes
Application mozilla firefox 2.0.0.14 Yes
Application mozilla firefox 2.0_.1 Yes
Application mozilla firefox 2.0_.4 Yes
Application mozilla firefox 2.0_.5 Yes
Application mozilla firefox 2.0_.6 Yes
Application mozilla firefox 2.0_.9 Yes
Application mozilla firefox 2.0_.10 Yes
Application mozilla firefox 2.0_8 Yes
Application mozilla seamonkey 1.1 Yes
Application mozilla seamonkey 1.1.1 Yes
Application mozilla seamonkey 1.1.2 Yes
Application mozilla seamonkey 1.1.3 Yes
Application mozilla seamonkey 1.1.4 Yes
Application mozilla seamonkey 1.1.5 Yes
Application mozilla seamonkey 1.1.6 Yes
Application mozilla seamonkey 1.1.7 Yes
Application mozilla seamonkey 1.1.8 Yes
Application mozilla seamonkey 1.1.9 Yes
Application mozilla thunderbird 2.0_.4 Yes
Application mozilla thunderbird 2.0_.5 Yes
Application mozilla thunderbird 2.0_.6 Yes
Application mozilla thunderbird 2.0_.9 Yes
Application mozilla thunderbird 2.0_.12 Yes
Application mozilla thunderbird 2.0_.13 Yes
Application mozilla thunderbird 2.0_.14 Yes
Application mozilla thunderbird 2.0_8 Yes
References