CVE-2008-5015

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which…

published November 13, 2008

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02215 · 82.4th percentile
Published
2008-11-13T11:00Z
EPSS history
Timeline
  • 13 NOV 11:00Z
    Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which…
    cvelistv5