CVE-2008-5503

The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any…

published December 17, 2008

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01521 · 74.2th percentile
Published
2008-12-17T23:00Z
EPSS history
Timeline
  • 17 DEC 23:00Z
    The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any…
    cvelistv5