CVE-2008-0416
Mozilla arbitrary code execution
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) "zero-length non-ASCII sequences" in certain Asian character sets.
Múltiples vulnerabilidades de XSS en Mozilla Firefox en versiones anteriores a 2.0.0.12, Thunderbird en versiones anteriores a 2.0.0.12 y SeaMonkey en versiones anteriores a 1.1.8 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de ciertas codificaciones de caracteres, incluyendo (1) un carácter de retroceso que se trata como un espacio en blanco, (2) 0x80 con codificación Shift_JIS y (3) "secuencias de longitud cero non-ASCII" en ciertos conjuntos de caracteres asiáticos.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2008-01-23 CVE Reserved
- 2008-02-08 CVE Published
- 2024-08-07 CVE Updated
- 2024-11-08 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (28)
| URL | Tag | Source |
|---|---|---|
| http://jvn.jp/en/jp/JVN21563357/index.html | Third Party Advisory | |
| http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html | Third Party Advisory | |
| http://www.mozilla.org/security/announce/2008/mfsa2008-13.html | X_refsource_confirm | |
| http://www.securityfocus.com/bid/29303 | Vdb Entry | |
| http://www.us-cert.gov/cas/techalerts/TA08-087A.html | Third Party Advisory | |
| https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161 | X_refsource_misc | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/40488 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mozilla Search vendor "Mozilla" | Firefox Search vendor "Mozilla" for product "Firefox" | <= 2.0.0.11 Search vendor "Mozilla" for product "Firefox" and version " <= 2.0.0.11" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Seamonkey Search vendor "Mozilla" for product "Seamonkey" | <= 1.1.7 Search vendor "Mozilla" for product "Seamonkey" and version " <= 1.1.7" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Thunderbird Search vendor "Mozilla" for product "Thunderbird" | <= 2.0.0.11 Search vendor "Mozilla" for product "Thunderbird" and version " <= 2.0.0.11" | - |
Affected
| ||||||