CVE-2008-0418 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-0418
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0418

Description: Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-582-2 http://www.ubuntu.com/usn/usn-582-1 http://www.ubuntu.com/usn/usn-576-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 ST 1019329 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399 SAID Secunia Advisory: SA30327 Secunia Advisory: SA29567 Secunia Advisory: SA29211 Secunia Advisory: SA29164 Secunia Advisory: SA29098 Secunia Advisory: SA29167 Secunia Advisory: SA28622 Secunia Advisory: SA29086 Secunia Advisory: SA29049 Secunia Advisory: SA28958 Secunia Advisory: SA28939 Secunia Advisory: SA28924 Secunia Advisory: SA28879 Secunia Advisory: SA28877 Secunia Advisory: SA28865 Secunia Advisory: SA28864 Secunia Advisory: SA28839 Secunia Advisory: SA28815 Secunia Advisory: SA28808 Secunia Advisory: SA28766 Secunia Advisory: SA28818 Secunia Advisory: SA28754 Secunia Advisory: SA31043 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0103.html http://www.redhat.com/support/errata/RHSA-2008-0104.html http://www.redhat.com/support/errata/RHSA-2008-0105.html MISC http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 http://www.mandriva.com/security/advisories?name=MDVSA-2008:062 FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1506 http://www.debian.org/security/2008/dsa-1489 http://www.debian.org/security/2008/dsa-1485 http://www.debian.org/security/2008/dsa-1484 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 http://www.mozilla.org/security/announce/2008/mfsa2008-05.html http://wiki.rpath.com/Advisories:rPSA-2008-0051 http://browser.netscape.com/releasenotes/ http://wiki.rpath.com/Advisories:rPSA-2008-0093 CERT-VN 309608 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/488002/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/488971/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/487826/100/0/threaded BID 27406

Return to the previous page.