CVE-2008-4068
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,...
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
Exploit likelihood
What each source reports
NVD Score used
7.8
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
- Record
CVE-2008-4068- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:C/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
- Record
CVE-2008-4068- Updated
- 2026-11-02
EUVDEUVD-2008-4053 No score
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
- Record
EUVD-2008-4053- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qx75-v3cf-r4q5 No score
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,...
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
- Record
GHSA-qx75-v3cf-r4q5- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 From an advisory covering 14 CVEs |
before 2.0.0.17-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.12-0etch1 Show 26 moreShow less2.0.0.12-12.0.0.12-22.0.0.13-0etch12.0.0.13-12.0.0.14-0etch12.0.0.14-12.0.0.14-22.0.0.15-0etch12.0.0.16-0etch12.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.17-0etch1 |
xulrunnerDebian:4.0 From an advisory covering 28 CVEs |
before 1.8.0.15~pre080614h-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 12 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch11.8.0.15~pre080131b-0etch11.8.0.15~pre080323b-0etch11.8.0.15~pre080323b-0etch21.8.0.15~pre080614d-0etch1 |
1.8.0.15~pre080614h-0etch1 |
icedoveDebian:4.0 From an advisory covering 28 CVEs |
before 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, plus listed versions 1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny11.5.0.13+1.5.0.14b.dfsg1-0etch11.5.0.13+1.5.0.14b.dfsg1-0lenny1 Show 5 moreShow less1.5.0.13+1.5.0.15a.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch2 |
1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 |
iceapeDebian:4.0 From an advisory covering 47 CVEs |
before 1.0.13~pre080614i-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1 Show 8 moreShow less1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.13~pre080323b-0etch11.0.13~pre080323b-0etch21.0.13~pre080323b-0etch31.0.8-41.0.9-0etch1 |
1.0.13~pre080614i-0etch1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
Show 176 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:0.12-19.el5 | 0:0.12-19.el5 |
nssRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
devhelpRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:0.12-19.el5 | 0:0.12-19.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:3.0.2-3.el5 | 0:3.0.2-3.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:3.0.2-3.el5 | 0:3.0.2-3.el5 |
nssRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-toolsRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
yelpRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:2.16.0-21.el5 | 0:2.16.0-21.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:2.16.0-21.el5 | 0:2.16.0-21.el5 |
devhelpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:0.12-19.el5 | 0:0.12-19.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.0.2-3.el5 | 0:3.0.2-3.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.0.2-3.el5 | 0:3.0.2-3.el5 |
nssRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-toolsRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
yelpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:2.16.0-21.el5 | 0:2.16.0-21.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:2.16.0-21.el5 | 0:2.16.0-21.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.5.0.12-16.el4 | 0:1.5.0.12-16.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.5.0.12-16.el4 | 0:1.5.0.12-16.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.5.0.12-16.el4 | 0:1.5.0.12-16.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.5.0.12-16.el4 | 0:1.5.0.12-16.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.5.0.12-16.el4 | 0:1.5.0.12-16.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.5.0.12-16.el4 | 0:1.5.0.12-16.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.5.0.12-16.el4 | 0:1.5.0.12-16.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.5.0.12-16.el4 | 0:1.5.0.12-16.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:2.0.0.17-1.el5 | 0:2.0.0.17-1.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:2.0.0.17-1.el5 | 0:2.0.0.17-1.el5 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 12 CVEs |
before 0:2.0.0.17-1.el5 | 0:2.0.0.17-1.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 12 CVEs |
before 0:2.0.0.17-1.el5 | 0:2.0.0.17-1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4068 is a high vulnerability (CVSS 7.8) in Mozilla Firefox, published September 24, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.17%, the 90th percentile. No source names a fixed version.
References
secunia.com/advisories/32025
secunia.com/advisories/32011
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232
debian.org/security/2009/dsa-1697
secunia.com/advisories/32096
redhat.com/archives/fedora-package-announce/2008-September/msg01384.html
Show 118 moreShow less
ubuntu.com/usn/usn-645-1
mandriva.com/security/advisories?name=MDVSA-2008:206
secunia.com/advisories/32144
secunia.com/advisories/32010
securitytracker.com/id?1020921
vupen.com/english/advisories/2009/0977
ubuntu.com/usn/usn-645-2
securityfocus.com/bid/31346
secunia.com/advisories/31985
lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html
secunia.com/advisories/31984
secunia.com/advisories/32185
secunia.com/advisories/32196
redhat.com/archives/fedora-package-announce/2008-September/msg01335.html
debian.org/security/2008/dsa-1669
mozilla.org/security/announce/2008/mfsa2008-44.html
secunia.com/advisories/32042
secunia.com/advisories/33433
vupen.com/english/advisories/2008/2661
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422
secunia.com/advisories/32095
secunia.com/advisories/32089
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
secunia.com/advisories/32092
redhat.com/support/errata/RHSA-2008-0879.html
mandriva.com/security/advisories?name=MDVSA-2008:205
debian.org/security/2009/dsa-1696
download.novell.com/Download?buildid=WZXONb-tqBw~
redhat.com/archives/fedora-package-announce/2008-September/msg01403.html
secunia.com/advisories/31987
exchange.xforce.ibmcloud.com/vulnerabilities/45360
ubuntu.com/usn/usn-647-1
secunia.com/advisories/32007
redhat.com/support/errata/RHSA-2008-0882.html
secunia.com/advisories/32845
debian.org/security/2008/dsa-1649
secunia.com/advisories/32012
secunia.com/advisories/33434
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123
secunia.com/advisories/32044
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11471
redhat.com/support/errata/RHSA-2008-0908.html
secunia.com/advisories/34501
secunia.com/advisories/32082
nvd.nist.gov/vuln/detail/CVE-2008-4068
github.com/advisories/GHSA-qx75-v3cf-r4q5
access.redhat.com/errata/RHSA-2008:0879
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=463189
bugzilla.redhat.com/show_bug.cgi?id=463190
bugzilla.redhat.com/show_bug.cgi?id=463198
bugzilla.redhat.com/show_bug.cgi?id=463199
bugzilla.redhat.com/show_bug.cgi?id=463201
bugzilla.redhat.com/show_bug.cgi?id=463203
bugzilla.redhat.com/show_bug.cgi?id=463204
bugzilla.redhat.com/show_bug.cgi?id=463234
bugzilla.redhat.com/show_bug.cgi?id=463246
bugzilla.redhat.com/show_bug.cgi?id=463248
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0879.json
access.redhat.com/security/cve/CVE-2008-3837
cve.org/CVERecord?id=CVE-2008-3837
nvd.nist.gov/vuln/detail/CVE-2008-3837
access.redhat.com/security/cve/CVE-2008-4058
cve.org/CVERecord?id=CVE-2008-4058
nvd.nist.gov/vuln/detail/CVE-2008-4058
access.redhat.com/security/cve/CVE-2008-4060
cve.org/CVERecord?id=CVE-2008-4060
nvd.nist.gov/vuln/detail/CVE-2008-4060
access.redhat.com/security/cve/CVE-2008-4061
cve.org/CVERecord?id=CVE-2008-4061
nvd.nist.gov/vuln/detail/CVE-2008-4061
access.redhat.com/security/cve/CVE-2008-4062
cve.org/CVERecord?id=CVE-2008-4062
nvd.nist.gov/vuln/detail/CVE-2008-4062
access.redhat.com/security/cve/CVE-2008-4063
cve.org/CVERecord?id=CVE-2008-4063
nvd.nist.gov/vuln/detail/CVE-2008-4063
access.redhat.com/security/cve/CVE-2008-4064
cve.org/CVERecord?id=CVE-2008-4064
nvd.nist.gov/vuln/detail/CVE-2008-4064
access.redhat.com/security/cve/CVE-2008-4065
cve.org/CVERecord?id=CVE-2008-4065
nvd.nist.gov/vuln/detail/CVE-2008-4065
access.redhat.com/security/cve/CVE-2008-4067
cve.org/CVERecord?id=CVE-2008-4067
nvd.nist.gov/vuln/detail/CVE-2008-4067
access.redhat.com/security/cve/CVE-2008-4068
cve.org/CVERecord?id=CVE-2008-4068
access.redhat.com/errata/RHSA-2008:0882
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=463181
bugzilla.redhat.com/show_bug.cgi?id=463182
bugzilla.redhat.com/show_bug.cgi?id=463192
bugzilla.redhat.com/show_bug.cgi?id=463243
bugzilla.redhat.com/show_bug.cgi?id=463251
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0882.json
access.redhat.com/security/cve/CVE-2008-0016
cve.org/CVERecord?id=CVE-2008-0016
nvd.nist.gov/vuln/detail/CVE-2008-0016
access.redhat.com/security/cve/CVE-2008-3835
cve.org/CVERecord?id=CVE-2008-3835
nvd.nist.gov/vuln/detail/CVE-2008-3835
access.redhat.com/security/cve/CVE-2008-4059
cve.org/CVERecord?id=CVE-2008-4059
nvd.nist.gov/vuln/detail/CVE-2008-4059
access.redhat.com/security/cve/CVE-2008-4066
cve.org/CVERecord?id=CVE-2008-4066
nvd.nist.gov/vuln/detail/CVE-2008-4066
access.redhat.com/security/cve/CVE-2008-4069
cve.org/CVERecord?id=CVE-2008-4069
nvd.nist.gov/vuln/detail/CVE-2008-4069
access.redhat.com/errata/RHSA-2008:0908
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=464041
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0908.json
access.redhat.com/security/cve/CVE-2008-4070
cve.org/CVERecord?id=CVE-2008-4070
nvd.nist.gov/vuln/detail/CVE-2008-4070