CVE-2008-2803

The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply…

published July 7, 2008

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03213 · 88.0th percentile
Published
2008-07-07T23:00Z
EPSS history
Timeline
  • 07 JUL 23:00Z
    The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply…
    cvelistv5