CVE - CVE-2008-4060

CVE-ID
CVE-2008-4060	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create documents that lack script-handling objects, and execute arbitrary code with chrome privileges, via vectors related to (1) the document.loadBindingDocument function and (2) XSLT.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1020915 URL:http://www.securitytracker.com/id?1020915 MISC:256408 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1~~ (Obsolete source) MISC:31346 URL:http://www.securityfocus.com/bid/31346 MISC:31984 URL:http://secunia.com/advisories/31984 MISC:31985 URL:http://secunia.com/advisories/31985 MISC:31987 URL:http://secunia.com/advisories/31987 MISC:32007 URL:http://secunia.com/advisories/32007 MISC:32010 URL:http://secunia.com/advisories/32010 MISC:32011 URL:http://secunia.com/advisories/32011 MISC:32012 URL:http://secunia.com/advisories/32012 MISC:32025 URL:http://secunia.com/advisories/32025 MISC:32042 URL:http://secunia.com/advisories/32042 MISC:32044 URL:http://secunia.com/advisories/32044 MISC:32082 URL:http://secunia.com/advisories/32082 MISC:32089 URL:http://secunia.com/advisories/32089 MISC:32092 URL:http://secunia.com/advisories/32092 MISC:32095 URL:http://secunia.com/advisories/32095 MISC:32096 URL:http://secunia.com/advisories/32096 MISC:32144 URL:http://secunia.com/advisories/32144 MISC:32185 URL:http://secunia.com/advisories/32185 MISC:32196 URL:http://secunia.com/advisories/32196 MISC:32845 URL:http://secunia.com/advisories/32845 MISC:33433 URL:http://secunia.com/advisories/33433 MISC:33434 URL:http://secunia.com/advisories/33434 MISC:34501 URL:http://secunia.com/advisories/34501 MISC:ADV-2008-2661 URL:~~http://www.vupen.com/english/advisories/2008/2661~~ (Obsolete source) MISC:ADV-2009-0977 URL:~~http://www.vupen.com/english/advisories/2009/0977~~ (Obsolete source) MISC:DSA-1649 URL:http://www.debian.org/security/2008/dsa-1649 MISC:DSA-1669 URL:http://www.debian.org/security/2008/dsa-1669 MISC:DSA-1696 URL:http://www.debian.org/security/2009/dsa-1696 MISC:DSA-1697 URL:http://www.debian.org/security/2009/dsa-1697 MISC:FEDORA-2008-8401 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html MISC:FEDORA-2008-8425 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html MISC:FEDORA-2008-8429 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html MISC:MDVSA-2008:205 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2008:205~~ (Obsolete source) MISC:MDVSA-2008:206 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2008:206~~ (Obsolete source) MISC:RHSA-2008:0879 URL:http://www.redhat.com/support/errata/RHSA-2008-0879.html MISC:RHSA-2008:0882 URL:http://www.redhat.com/support/errata/RHSA-2008-0882.html MISC:RHSA-2008:0908 URL:http://www.redhat.com/support/errata/RHSA-2008-0908.html MISC:SSA:2008-269-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 MISC:SSA:2008-269-02 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 MISC:SSA:2008-270-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 MISC:SUSE-SA:2008:050 URL:http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html MISC:USN-645-1 URL:http://www.ubuntu.com/usn/usn-645-1 MISC:USN-645-2 URL:http://www.ubuntu.com/usn/usn-645-2 MISC:USN-647-1 URL:http://www.ubuntu.com/usn/usn-647-1 MISC:firefox-xslt-code-execution(45353) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/45353 MISC:http://download.novell.com/Download?buildid=WZXONb-tqBw~ URL:http://download.novell.com/Download?buildid=WZXONb-tqBw~ MISC:http://www.mozilla.org/security/announce/2008/mfsa2008-41.html URL:http://www.mozilla.org/security/announce/2008/mfsa2008-41.html MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=448548 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=448548 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=451037 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=451037 MISC:oval:org.mitre.oval:def:11607 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11607
Assigning CNA
Red Hat, Inc.
Date Record Created
20080912	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20080912)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)