CVE-2008-2809
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions...
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
Exploit likelihood
What each source reports
NVD Score used
4.0
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
- Record
CVE-2008-2809- CVSS 2.0
- 4.0 Medium
AV:N/AC:H/Au:N/C:N/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
- Record
CVE-2008-2809- Updated
- 2026-11-02
EUVDEUVD-2008-2802 No score
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
- Record
EUVD-2008-2802- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pxqv-4rrp-wmpm No score
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions...
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
- Record
GHSA-pxqv-4rrp-wmpm- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 From an advisory covering 11 CVEs |
before 2.0.0.15-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.12-0etch1 Show 24 moreShow less2.0.0.12-12.0.0.12-22.0.0.13-0etch12.0.0.13-12.0.0.14-0etch12.0.0.14-12.0.0.14-22.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.15-0etch1 |
xulrunnerDebian:4.0 From an advisory covering 13 CVEs |
before 1.8.0.15~pre080614d-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 11 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch11.8.0.15~pre080131b-0etch11.8.0.15~pre080323b-0etch11.8.0.15~pre080323b-0etch2 |
1.8.0.15~pre080614d-0etch1 |
icedoveDebian:4.0 From an advisory covering 9 CVEs |
before 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1, plus listed versions 1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny11.5.0.13+1.5.0.14b.dfsg1-0etch11.5.0.13+1.5.0.14b.dfsg1-0lenny1 Show 4 moreShow less1.5.0.13+1.5.0.15a.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch2 |
1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1 |
iceapeDebian:4.0 From an advisory covering 47 CVEs |
before 1.0.13~pre080614i-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1 Show 8 moreShow less1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.13~pre080323b-0etch11.0.13~pre080323b-0etch21.0.13~pre080323b-0etch31.0.8-41.0.9-0etch1 |
1.0.13~pre080614i-0etch1 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
Show 152 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.17.el2 | 0:1.0.9-0.17.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.20.el3 | 0:1.0.9-0.20.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-16.3.el4_6 | 0:1.0.9-16.3.el4_6 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.5.0.12-0.19.el4 | 0:1.5.0.12-0.19.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
devhelpRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.0-2.el5 | 0:3.0-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.0-2.el5 | 0:3.0-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
yelpRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:2.16.0-19.el5 | 0:2.16.0-19.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:2.16.0-19.el5 | 0:2.16.0-19.el5 |
devhelpRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
devhelp-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-17.el5 | 0:0.12-17.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.0-2.el5 | 0:3.0-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.0-2.el5 | 0:3.0-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9-1.el5 | 0:1.9-1.el5 |
yelpRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:2.16.0-19.el5 | 0:2.16.0-19.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:2.16.0-19.el5 | 0:2.16.0-19.el5 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.5.0.12-14.el4 | 0:1.5.0.12-14.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:2.0.0.16-1.el5 | 0:2.0.0.16-1.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:2.0.0.16-1.el5 | 0:2.0.0.16-1.el5 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 13 CVEs |
before 0:2.0.0.16-1.el5 | 0:2.0.0.16-1.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 13 CVEs |
before 0:2.0.0.16-1.el5 | 0:2.0.0.16-1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2809 is a medium vulnerability (CVSS 4.0) in Mozilla Firefox, published July 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.24%, the 69th percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html
redhat.com/support/errata/RHSA-2008-0549.html
debian.org/security/2009/dsa-1697
secunia.com/advisories/31021
secunia.com/advisories/30898
secunia.com/advisories/31403
Show 120 moreShow less
wiki.rpath.com/Advisories:rPSA-2008-0216
issues.rpath.com/browse/RPL-2646
secunia.com/advisories/30949
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152
vupen.com/english/advisories/2009/0977
secunia.com/advisories/31069
secunia.com/advisories/31008
secunia.com/advisories/31377
bugzilla.mozilla.org/show_bug.cgi?id=240261
rhn.redhat.com/errata/RHSA-2008-0616.html
securityreason.com/securityalert/3498
vupen.com/english/advisories/2008/1993/references
secunia.com/advisories/31023
mandriva.com/security/advisories?name=MDVSA-2008:155
securityfocus.com/bid/30038
debian.org/security/2008/dsa-1607
security.gentoo.org/glsa/glsa-200808-03.xml
secunia.com/advisories/31005
secunia.com/advisories/33433
redhat.com/archives/fedora-package-announce/2008-July/msg00207.html
securitytracker.com/id?1020419
secunia.com/advisories/31253
mozilla.org/projects/security/known-vulnerabilities.html
redhat.com/archives/fedora-package-announce/2008-August/msg00125.html
secunia.com/advisories/31183
secunia.com/advisories/30903
redhat.com/support/errata/RHSA-2008-0547.html
redhat.com/archives/fedora-package-announce/2008-July/msg00288.html
ubuntu.com/usn/usn-629-1
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
securityfocus.com/archive/1/483937/100/100/threaded
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911
bugzilla.mozilla.org/show_bug.cgi?id=402347
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484
debian.org/security/2008/dsa-1615
securityfocus.com/archive/1/483960/100/100/threaded
redhat.com/archives/fedora-package-announce/2008-August/msg00144.html
secunia.com/advisories/31220
secunia.com/advisories/31195
securityfocus.com/archive/1/483929/100/100/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10205
secunia.com/advisories/31076
mozilla.org/security/announce/2008/mfsa2008-31.html
ubuntu.com/usn/usn-619-1
secunia.com/advisories/30911
bugzilla.mozilla.org/show_bug.cgi?id=327181
redhat.com/support/errata/RHSA-2008-0569.html
secunia.com/advisories/30878
debian.org/security/2008/dsa-1621
securityfocus.com/archive/1/494080/100/0/threaded
securitytracker.com/id?1018979
nils.toedtmann.net/pub/subjectAltName.txt
exchange.xforce.ibmcloud.com/vulnerabilities/43524
secunia.com/advisories/31286
redhat.com/archives/fedora-package-announce/2008-July/msg00295.html
secunia.com/advisories/34501
mandriva.com/security/advisories?name=MDVSA-2008:136
nvd.nist.gov/vuln/detail/CVE-2008-2809
github.com/advisories/GHSA-pxqv-4rrp-wmpm
access.redhat.com/errata/RHSA-2008:0547
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=452597
bugzilla.redhat.com/show_bug.cgi?id=452598
bugzilla.redhat.com/show_bug.cgi?id=452599
bugzilla.redhat.com/show_bug.cgi?id=452600
bugzilla.redhat.com/show_bug.cgi?id=452602
bugzilla.redhat.com/show_bug.cgi?id=452604
bugzilla.redhat.com/show_bug.cgi?id=452605
bugzilla.redhat.com/show_bug.cgi?id=452709
bugzilla.redhat.com/show_bug.cgi?id=452710
bugzilla.redhat.com/show_bug.cgi?id=452711
bugzilla.redhat.com/show_bug.cgi?id=452712
bugzilla.redhat.com/show_bug.cgi?id=453007
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0547.json
access.redhat.com/security/cve/CVE-2008-2798
cve.org/CVERecord?id=CVE-2008-2798
nvd.nist.gov/vuln/detail/CVE-2008-2798
access.redhat.com/security/cve/CVE-2008-2799
cve.org/CVERecord?id=CVE-2008-2799
nvd.nist.gov/vuln/detail/CVE-2008-2799
access.redhat.com/security/cve/CVE-2008-2800
cve.org/CVERecord?id=CVE-2008-2800
nvd.nist.gov/vuln/detail/CVE-2008-2800
access.redhat.com/security/cve/CVE-2008-2801
cve.org/CVERecord?id=CVE-2008-2801
nvd.nist.gov/vuln/detail/CVE-2008-2801
access.redhat.com/security/cve/CVE-2008-2802
cve.org/CVERecord?id=CVE-2008-2802
nvd.nist.gov/vuln/detail/CVE-2008-2802
access.redhat.com/security/cve/CVE-2008-2803
cve.org/CVERecord?id=CVE-2008-2803
nvd.nist.gov/vuln/detail/CVE-2008-2803
access.redhat.com/security/cve/CVE-2008-2805
cve.org/CVERecord?id=CVE-2008-2805
nvd.nist.gov/vuln/detail/CVE-2008-2805
access.redhat.com/security/cve/CVE-2008-2807
cve.org/CVERecord?id=CVE-2008-2807
nvd.nist.gov/vuln/detail/CVE-2008-2807
access.redhat.com/security/cve/CVE-2008-2808
cve.org/CVERecord?id=CVE-2008-2808
nvd.nist.gov/vuln/detail/CVE-2008-2808
access.redhat.com/security/cve/CVE-2008-2809
cve.org/CVERecord?id=CVE-2008-2809
access.redhat.com/security/cve/CVE-2008-2810
cve.org/CVERecord?id=CVE-2008-2810
nvd.nist.gov/vuln/detail/CVE-2008-2810
access.redhat.com/security/cve/CVE-2008-2811
cve.org/CVERecord?id=CVE-2008-2811
nvd.nist.gov/vuln/detail/CVE-2008-2811
access.redhat.com/errata/RHSA-2008:0549
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0549.json
access.redhat.com/errata/RHSA-2008:0569
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0569.json
access.redhat.com/errata/RHSA-2008:0616
bugzilla.redhat.com/show_bug.cgi?id=452204
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0616.json
access.redhat.com/security/cve/CVE-2008-2785
cve.org/CVERecord?id=CVE-2008-2785
nvd.nist.gov/vuln/detail/CVE-2008-2785