CVE-2008-2802

Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL…

published July 7, 2008

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file, related to this file's "privilege level."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03787 · 89.9th percentile
Published
2008-07-07T23:00Z
EPSS history
Timeline
  • 07 JUL 23:00Z
    Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL…
    cvelistv5