CVE-2008-5513

CVE Details

Release Date:	2008-12-17
Impact:	Critical	What is this?

Description

Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.

See more information about CVE-2008-5513 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	4.3
Vector String:	AV:N/AC:M/Au:N/C:N/I:P/A:N
Version:	2.0
Attack Vector:	Network
Attack Complexity:	Medium
Authentication:	None
Confidentiality Impact:	None
Integrity Impact:	Partial
Availability Impact:	None

Errata information

Platform	Errata	Release Date
Oracle Enterprise Linux version 3 (seamonkey)	ELSA-2008-1037	2008-12-17
Oracle Enterprise Linux version 4 (firefox)	ELSA-2008-1036	2008-12-17
Oracle Enterprise Linux version 4 (nspr)	ELSA-2008-1036	2008-12-17
Oracle Enterprise Linux version 4 (nss)	ELSA-2008-1036	2008-12-17
Oracle Enterprise Linux version 4 (seamonkey)	ELSA-2008-1037	2008-12-17
Oracle Enterprise Linux version 4 (thunderbird)	ELSA-2009-0002	2009-01-07
Oracle Linux version 5 (firefox)	ELSA-2008-1036	2008-12-17
Oracle Linux version 5 (nspr)	ELSA-2008-1036	2008-12-17
Oracle Linux version 5 (nss)	ELSA-2008-1036	2008-12-17
Oracle Linux version 5 (xulrunner)	ELSA-2008-1036	2008-12-17