CVE-2008-2803
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0...
6.8 Medium
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.
Exploit likelihood
3.21%Down 6.7 points since Feb 4, 2022
What each source reports
NVD Score used
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.
- Record
CVE-2008-2803- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.
- Record
CVE-2008-2803- Updated
- 2026-11-02
EUVDEUVD-2008-2796 No score
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.
- Record
EUVD-2008-2796- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-94rc-32qx-6f25 No score
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0...
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.
- Record
GHSA-94rc-32qx-6f25- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 From an advisory covering 11 CVEs |
before 2.0.0.15-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.12-0etch1 Show 24 moreShow less2.0.0.12-12.0.0.12-22.0.0.13-0etch12.0.0.13-12.0.0.14-0etch12.0.0.14-12.0.0.14-22.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.15-0etch1 |
xulrunnerDebian:4.0 From an advisory covering 13 CVEs |
before 1.8.0.15~pre080614d-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 11 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch11.8.0.15~pre080131b-0etch11.8.0.15~pre080323b-0etch11.8.0.15~pre080323b-0etch2 |
1.8.0.15~pre080614d-0etch1 |
icedoveDebian:4.0 From an advisory covering 9 CVEs |
before 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1, plus listed versions 1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny11.5.0.13+1.5.0.14b.dfsg1-0etch11.5.0.13+1.5.0.14b.dfsg1-0lenny1 Show 4 moreShow less1.5.0.13+1.5.0.15a.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch2 |
1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1 |
iceapeDebian:4.0 From an advisory covering 47 CVEs |
before 1.0.13~pre080614i-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1 Show 8 moreShow less1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.13~pre080323b-0etch11.0.13~pre080323b-0etch21.0.13~pre080323b-0etch31.0.8-41.0.9-0etch1 |
1.0.13~pre080614i-0etch1 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
Show 152 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
devhelpRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.0-2.el5 | 0:3.0-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.0-2.el5 | 0:3.0-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
yelpRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:2.16.0-19.el5 | 0:2.16.0-19.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:2.16.0-19.el5 | 0:2.16.0-19.el5 |
devhelpRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.0-2.el5 | 0:3.0-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.0-2.el5 | 0:3.0-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
yelpRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:2.16.0-19.el5 | 0:2.16.0-19.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:2.16.0-19.el5 | 0:2.16.0-19.el5 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:2.0.0.16-1.el5 | 0:2.0.0.16-1.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:2.0.0.16-1.el5 | 0:2.0.0.16-1.el5 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 13 CVEs |
before 0:2.0.0.16-1.el5 | 0:2.0.0.16-1.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 13 CVEs |
before 0:2.0.0.16-1.el5 | 0:2.0.0.16-1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2803 is a medium vulnerability (CVSS 6.8) in Mozilla Firefox, published July 7, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.21%, the 88th percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html
redhat.com/support/errata/RHSA-2008-0549.html
debian.org/security/2009/dsa-1697
secunia.com/advisories/31021
Show 112 moreShow less
wiki.rpath.com/Advisories:rPSA-2008-0216
issues.rpath.com/browse/RPL-2646
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152
vupen.com/english/advisories/2009/0977
bugzilla.mozilla.org/show_bug.cgi?id=418356
rhn.redhat.com/errata/RHSA-2008-0616.html
mandriva.com/security/advisories?name=MDVSA-2008:155
securityfocus.com/bid/30038
security.gentoo.org/glsa/glsa-200808-03.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10747
securitytracker.com/id?1020419
mozilla.org/projects/security/known-vulnerabilities.html
ubuntu.com/usn/usn-629-1
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
nvd.nist.gov/vuln/detail/CVE-2008-2803
github.com/advisories/GHSA-94rc-32qx-6f25
access.redhat.com/errata/RHSA-2008:0547
bugzilla.redhat.com/show_bug.cgi?id=452597
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0547.json
cve.org/CVERecord?id=CVE-2008-2798