CVE-2008-5019
The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows...
The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
4.3
The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.
- Record
CVE-2008-5019- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.
- Record
CVE-2008-5019- Updated
- 2026-11-02
EUVDEUVD-2008-4998 No score
The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.
- Record
EUVD-2008-4998- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w542-59hv-5363 No score
The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows...
The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.
- Record
GHSA-w542-59hv-5363- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 |
before 2.0.0.18-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.12-0etch1 Show 27 moreShow less2.0.0.12-12.0.0.12-22.0.0.13-0etch12.0.0.13-12.0.0.14-0etch12.0.0.14-12.0.0.14-22.0.0.15-0etch12.0.0.16-0etch12.0.0.17-0etch12.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.18-0etch1 |
seamonkeyRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
Show 161 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
firefoxRed Hat:enterprise_linux:4::as |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::as |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::as |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::desktop |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::desktop |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::es |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::es |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::es |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::ws |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::ws |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
nssRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
devhelpRed Hat:enterprise_linux:5::client |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
firefoxRed Hat:enterprise_linux:5::client |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
nssRed Hat:enterprise_linux:5::client |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-toolsRed Hat:enterprise_linux:5::client |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::client |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
yelpRed Hat:enterprise_linux:5::client |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
devhelpRed Hat:enterprise_linux:5::server |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-develRed Hat:enterprise_linux:5::server |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
firefoxRed Hat:enterprise_linux:5::server |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
nssRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-develRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-toolsRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::server |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
yelpRed Hat:enterprise_linux:5::server |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5019 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published November 13, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.07%, the 87th percentile. Fixed in iceweasel 2.0.0.18-0etch1.
References
vupen.com/english/advisories/2008/3146
securityfocus.com/bid/32281
redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
secunia.com/advisories/32713
redhat.com/support/errata/RHSA-2008-0977.html
mandriva.com/security/advisories?name=MDVSA-2008:230
Show 84 moreShow less
vupen.com/english/advisories/2009/0977
secunia.com/advisories/32695
redhat.com/support/errata/RHSA-2008-0978.html
secunia.com/advisories/32778
securitytracker.com/id?1021184
redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
secunia.com/advisories/32694
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10943
secunia.com/advisories/32721
us-cert.gov/cas/techalerts/TA08-319A.html
bugzilla.mozilla.org/buglist.cgi?bug_id=459906%2C460983
mozilla.org/security/announce/2008/mfsa2008-53.html
secunia.com/advisories/32693
mandriva.com/security/advisories?name=MDVSA-2008:228
secunia.com/advisories/32684
ubuntu.com/usn/usn-667-1
secunia.com/advisories/34501
nvd.nist.gov/vuln/detail/CVE-2008-5019
bugzilla.mozilla.org/buglist.cgi?bug_id=459906,460983
access.redhat.com/errata/RHSA-2008:0977
access.redhat.com/errata/RHSA-2008:0978
access.redhat.com/security/cve/CVE-2008-5019
bugzilla.redhat.com/show_bug.cgi?id=470889
github.com/advisories/GHSA-w542-59hv-5363
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=470864
bugzilla.redhat.com/show_bug.cgi?id=470867
bugzilla.redhat.com/show_bug.cgi?id=470873
bugzilla.redhat.com/show_bug.cgi?id=470881
bugzilla.redhat.com/show_bug.cgi?id=470883
bugzilla.redhat.com/show_bug.cgi?id=470884
bugzilla.redhat.com/show_bug.cgi?id=470892
bugzilla.redhat.com/show_bug.cgi?id=470894
bugzilla.redhat.com/show_bug.cgi?id=470895
bugzilla.redhat.com/show_bug.cgi?id=470898
bugzilla.redhat.com/show_bug.cgi?id=470902
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0977.json
access.redhat.com/security/cve/CVE-2008-0017
cve.org/CVERecord?id=CVE-2008-0017
nvd.nist.gov/vuln/detail/CVE-2008-0017
access.redhat.com/security/cve/CVE-2008-5012
cve.org/CVERecord?id=CVE-2008-5012
nvd.nist.gov/vuln/detail/CVE-2008-5012
access.redhat.com/security/cve/CVE-2008-5013
cve.org/CVERecord?id=CVE-2008-5013
nvd.nist.gov/vuln/detail/CVE-2008-5013
access.redhat.com/security/cve/CVE-2008-5014
cve.org/CVERecord?id=CVE-2008-5014
nvd.nist.gov/vuln/detail/CVE-2008-5014
access.redhat.com/security/cve/CVE-2008-5016
cve.org/CVERecord?id=CVE-2008-5016
nvd.nist.gov/vuln/detail/CVE-2008-5016
access.redhat.com/security/cve/CVE-2008-5017
cve.org/CVERecord?id=CVE-2008-5017
nvd.nist.gov/vuln/detail/CVE-2008-5017
access.redhat.com/security/cve/CVE-2008-5018
cve.org/CVERecord?id=CVE-2008-5018
nvd.nist.gov/vuln/detail/CVE-2008-5018
cve.org/CVERecord?id=CVE-2008-5019
access.redhat.com/security/cve/CVE-2008-5021
cve.org/CVERecord?id=CVE-2008-5021
nvd.nist.gov/vuln/detail/CVE-2008-5021
access.redhat.com/security/cve/CVE-2008-5022
cve.org/CVERecord?id=CVE-2008-5022
nvd.nist.gov/vuln/detail/CVE-2008-5022
access.redhat.com/security/cve/CVE-2008-5023
cve.org/CVERecord?id=CVE-2008-5023
nvd.nist.gov/vuln/detail/CVE-2008-5023
access.redhat.com/security/cve/CVE-2008-5024
cve.org/CVERecord?id=CVE-2008-5024
nvd.nist.gov/vuln/detail/CVE-2008-5024
access.redhat.com/security/cve/CVE-2008-5052
bugzilla.redhat.com/show_bug.cgi?id=1618336
cve.org/CVERecord?id=CVE-2008-5052
nvd.nist.gov/vuln/detail/CVE-2008-5052
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=454283
bugzilla.redhat.com/show_bug.cgi?id=470876
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0978.json
access.redhat.com/security/cve/CVE-2008-5015
cve.org/CVERecord?id=CVE-2008-5015
nvd.nist.gov/vuln/detail/CVE-2008-5015