CVE-2008-3837
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user...
CVE-2008-3837 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published September 24, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.27%, the 88th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 3.27%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 From an advisory covering 14 CVEs | before 2.0.0.17-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.12-0etch1 Show 26 moreShow less2.0.0.12-12.0.0.12-22.0.0.13-0etch12.0.0.13-12.0.0.14-0etch12.0.0.14-12.0.0.14-22.0.0.15-0etch12.0.0.16-0etch12.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 | 2.0.0.17-0etch1 |
xulrunnerDebian:4.0 From an advisory covering 28 CVEs | before 1.8.0.15~pre080614h-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 12 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch11.8.0.15~pre080131b-0etch11.8.0.15~pre080323b-0etch11.8.0.15~pre080323b-0etch21.8.0.15~pre080614d-0etch1 | 1.8.0.15~pre080614h-0etch1 |
iceapeDebian:4.0 From an advisory covering 47 CVEs | before 1.0.13~pre080614i-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1 Show 8 moreShow less1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.13~pre080323b-0etch11.0.13~pre080323b-0etch21.0.13~pre080323b-0etch31.0.8-41.0.9-0etch1 | 1.0.13~pre080614i-0etch1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs | before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs | before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs | before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs | before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs | before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs | before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs | before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
Show 163 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs | before 0:3.0.2-3.el4 | 0:3.0.2-3.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:0.12-19.el5 | 0:0.12-19.el5 |
nssRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
devhelpRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:0.12-19.el5 | 0:0.12-19.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:3.0.2-3.el5 | 0:3.0.2-3.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:3.0.2-3.el5 | 0:3.0.2-3.el5 |
nssRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-toolsRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
yelpRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:2.16.0-21.el5 | 0:2.16.0-21.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs | before 0:2.16.0-21.el5 | 0:2.16.0-21.el5 |
devhelpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:0.12-19.el5 | 0:0.12-19.el5 |
devhelp-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:0.12-19.el5 | 0:0.12-19.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:3.0.2-3.el5 | 0:3.0.2-3.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:3.0.2-3.el5 | 0:3.0.2-3.el5 |
nssRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
nss-toolsRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:3.12.1.1-1.el5 | 0:3.12.1.1-1.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:1.9.0.2-5.el5 | 0:1.9.0.2-5.el5 |
yelpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:2.16.0-21.el5 | 0:2.16.0-21.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:2.16.0-21.el5 | 0:2.16.0-21.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.20.el2 | 0:1.0.9-0.20.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs | before 0:1.0.9-0.24.el3 | 0:1.0.9-0.24.el3 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:0.10-0.10.el4 | 0:0.10-0.10.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs | before 0:1.0.9-26.el4 | 0:1.0.9-26.el4 |
What each source reports
NVD Score used 9.3
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.
- Record
CVE-2008-3837- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.
- Record
CVE-2008-3837- Updated
- 2026-11-02
EUVDEUVD-2008-3823No score
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.
- Record
EUVD-2008-3823- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w2pf-f3c3-85m7No score
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user...
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.
- Record
GHSA-w2pf-f3c3-85m7- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/32011
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232
debian.org/security/2009/dsa-1697
secunia.com/advisories/32096
redhat.com/archives/fedora-package-announce/2008-September/msg01384.html
ubuntu.com/usn/usn-645-1
Show 102 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/45348
secunia.com/advisories/32144
secunia.com/advisories/32010
vupen.com/english/advisories/2009/0977
ubuntu.com/usn/usn-645-2
securityfocus.com/bid/31346
secunia.com/advisories/31985
lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html
secunia.com/advisories/31984
secunia.com/advisories/32185
secunia.com/advisories/32196
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9950
redhat.com/archives/fedora-package-announce/2008-September/msg01335.html
debian.org/security/2008/dsa-1669
mozilla.org/security/announce/2008/mfsa2008-40.html
secunia.com/advisories/32042
secunia.com/advisories/33433
vupen.com/english/advisories/2008/2661
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422
secunia.com/advisories/32095
secunia.com/advisories/32089
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
securitytracker.com/id?1020922
redhat.com/support/errata/RHSA-2008-0879.html
bugzilla.mozilla.org/show_bug.cgi?id=329385
mandriva.com/security/advisories?name=MDVSA-2008:205
download.novell.com/Download?buildid=WZXONb-tqBw~
redhat.com/archives/fedora-package-announce/2008-September/msg01403.html
secunia.com/advisories/31987
redhat.com/support/errata/RHSA-2008-0882.html
secunia.com/advisories/32845
debian.org/security/2008/dsa-1649
secunia.com/advisories/32012
secunia.com/advisories/32044
secunia.com/advisories/34501
nvd.nist.gov/vuln/detail/CVE-2008-3837
github.com/advisories/GHSA-w2pf-f3c3-85m7
access.redhat.com/errata/RHSA-2008:0879
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=463189
bugzilla.redhat.com/show_bug.cgi?id=463190
bugzilla.redhat.com/show_bug.cgi?id=463198
bugzilla.redhat.com/show_bug.cgi?id=463199
bugzilla.redhat.com/show_bug.cgi?id=463201
bugzilla.redhat.com/show_bug.cgi?id=463203
bugzilla.redhat.com/show_bug.cgi?id=463204
bugzilla.redhat.com/show_bug.cgi?id=463234
bugzilla.redhat.com/show_bug.cgi?id=463246
bugzilla.redhat.com/show_bug.cgi?id=463248
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0879.json
access.redhat.com/security/cve/CVE-2008-3837
cve.org/CVERecord?id=CVE-2008-3837
access.redhat.com/security/cve/CVE-2008-4058
cve.org/CVERecord?id=CVE-2008-4058
nvd.nist.gov/vuln/detail/CVE-2008-4058
access.redhat.com/security/cve/CVE-2008-4060
cve.org/CVERecord?id=CVE-2008-4060
nvd.nist.gov/vuln/detail/CVE-2008-4060
access.redhat.com/security/cve/CVE-2008-4061
cve.org/CVERecord?id=CVE-2008-4061
nvd.nist.gov/vuln/detail/CVE-2008-4061
access.redhat.com/security/cve/CVE-2008-4062
cve.org/CVERecord?id=CVE-2008-4062
nvd.nist.gov/vuln/detail/CVE-2008-4062
access.redhat.com/security/cve/CVE-2008-4063
cve.org/CVERecord?id=CVE-2008-4063
nvd.nist.gov/vuln/detail/CVE-2008-4063
access.redhat.com/security/cve/CVE-2008-4064
cve.org/CVERecord?id=CVE-2008-4064
nvd.nist.gov/vuln/detail/CVE-2008-4064
access.redhat.com/security/cve/CVE-2008-4065
cve.org/CVERecord?id=CVE-2008-4065
nvd.nist.gov/vuln/detail/CVE-2008-4065
access.redhat.com/security/cve/CVE-2008-4067
cve.org/CVERecord?id=CVE-2008-4067
nvd.nist.gov/vuln/detail/CVE-2008-4067
access.redhat.com/security/cve/CVE-2008-4068
cve.org/CVERecord?id=CVE-2008-4068
nvd.nist.gov/vuln/detail/CVE-2008-4068
access.redhat.com/errata/RHSA-2008:0882
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=463181
bugzilla.redhat.com/show_bug.cgi?id=463182
bugzilla.redhat.com/show_bug.cgi?id=463192
bugzilla.redhat.com/show_bug.cgi?id=463243
bugzilla.redhat.com/show_bug.cgi?id=463251
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0882.json
access.redhat.com/security/cve/CVE-2008-0016
cve.org/CVERecord?id=CVE-2008-0016
nvd.nist.gov/vuln/detail/CVE-2008-0016
access.redhat.com/security/cve/CVE-2008-3835
cve.org/CVERecord?id=CVE-2008-3835
nvd.nist.gov/vuln/detail/CVE-2008-3835
access.redhat.com/security/cve/CVE-2008-4059
cve.org/CVERecord?id=CVE-2008-4059
nvd.nist.gov/vuln/detail/CVE-2008-4059
access.redhat.com/security/cve/CVE-2008-4066
cve.org/CVERecord?id=CVE-2008-4066
nvd.nist.gov/vuln/detail/CVE-2008-4066
access.redhat.com/security/cve/CVE-2008-4069
cve.org/CVERecord?id=CVE-2008-4069
nvd.nist.gov/vuln/detail/CVE-2008-4069