CVE-2008-0594
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the...
5.0 Medium
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
Exploit likelihood
1.97%Down 2.0 points since Feb 4, 2022
What each source reports
NVD Score used
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
- Record
CVE-2008-0594- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
- Record
CVE-2008-0594- Updated
- 2026-11-02
EUVDEUVD-2008-0604 No score
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
- Record
EUVD-2008-0604- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7wr6-m3x7-mq75 No score
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the...
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
- Record
GHSA-7wr6-m3x7-mq75- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score
MozillaFirefox-92.0-1.2 on GA media
These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10600-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 From an advisory covering 13 CVEs |
before 1.8.0.15~pre080131b-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 8 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch1 |
1.8.0.15~pre080131b-0etch1 |
icedoveDebian:4.0 From an advisory covering 12 CVEs |
before 1.5.0.13+1.5.0.15b.dfsg1-0etch2, plus listed versions 1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny11.5.0.13+1.5.0.14b.dfsg1-0etch11.5.0.13+1.5.0.14b.dfsg1-0lenny11.5.0.13+1.5.0.15a.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch1 |
1.5.0.13+1.5.0.15b.dfsg1-0etch2 |
iceweaselDebian:4.0 From an advisory covering 12 CVEs |
before 2.0.0.12-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.3-1 Show 16 moreShow less2.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.12-0etch1 |
iceapeDebian:4.0 From an advisory covering 15 CVEs |
before 1.0.12~pre080131b-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch11.0.11~pre071022-0etch1+lenny11.0.8-41.0.9-0etch1 |
1.0.12~pre080131b-0etch1 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 661 CVEs |
before 92.0-1.2 | 92.0-1.2 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0594 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published February 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. No source names a fixed version.
References
ubuntu.com/usn/usn-576-1
browser.netscape.com/releasenotes
secunia.com/advisories/28939
debian.org/security/2008/dsa-1506
Show 194 moreShow less
vupen.com/english/advisories/2008/0453/references
support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html
sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
securityfocus.com/archive/1/488002/100/0/threaded
lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html
securitytracker.com/id?1019342
mozilla.org/security/announce/2008/mfsa2008-11.html
redhat.com/archives/fedora-package-announce/2008-February/msg00381.html
wiki.rpath.com/Advisories:rPSA-2008-0051
bugzilla.mozilla.org/show_bug.cgi?id=408164
gentoo.org/security/en/glsa/glsa-200805-18.xml
mandriva.com/security/advisories?name=MDVSA-2008:048
nvd.nist.gov/vuln/detail/CVE-2008-0594
github.com/advisories/GHSA-7wr6-m3x7-mq75
suse.com/security/cve/CVE-2006-6077
This page doesn't list everything
Left out here: 1,697 references. The JSON record has them.