CVE-2008-5012
Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1...
5.0 MediumFix available
Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.
Exploit likelihood
2.03%Down 2.3 points since Feb 4, 2022
What each source reports
NVD Score used
Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.
- Record
CVE-2008-5012- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.
- Record
CVE-2008-5012- Updated
- 2026-11-02
EUVDEUVD-2008-4991 No score
Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.
- Record
EUVD-2008-4991- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hfvm-r385-4pvq No score
Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1...
Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.
- Record
GHSA-hfvm-r385-4pvq- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score
MozillaThunderbird-91.1.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10601-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 |
before 1.8.0.15~pre080614h-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 12 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch11.8.0.15~pre080131b-0etch11.8.0.15~pre080323b-0etch11.8.0.15~pre080323b-0etch21.8.0.15~pre080614d-0etch1 |
1.8.0.15~pre080614h-0etch1 |
iceweaselDebian:4.0 |
before 2.0.0.18-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.12-0etch1 Show 27 moreShow less2.0.0.12-12.0.0.12-22.0.0.13-0etch12.0.0.13-12.0.0.14-0etch12.0.0.14-12.0.0.14-22.0.0.15-0etch12.0.0.16-0etch12.0.0.17-0etch12.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.18-0etch1 |
icedoveDebian:4.0 |
before 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, plus listed versions 1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny11.5.0.13+1.5.0.14b.dfsg1-0etch11.5.0.13+1.5.0.14b.dfsg1-0lenny1 Show 5 moreShow less1.5.0.13+1.5.0.15a.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch2 |
1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 |
iceapeDebian:4.0 |
before 1.0.13~pre080614i-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1 Show 8 moreShow less1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.13~pre080323b-0etch11.0.13~pre080323b-0etch21.0.13~pre080323b-0etch31.0.8-41.0.9-0etch1 |
1.0.13~pre080614i-0etch1 |
thunderbirdRed Hat:enterprise_linux:4::as |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbirdRed Hat:enterprise_linux:4::es |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
Show 119 moreShow less
| Package | Affected | Fixed |
|---|---|---|
thunderbirdRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbirdRed Hat:enterprise_linux:5::client |
before 0:2.0.0.18-1.el5 | 0:2.0.0.18-1.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.0.0.18-1.el5 | 0:2.0.0.18-1.el5 |
thunderbirdRed Hat:rhel_productivity:5 |
before 0:2.0.0.18-1.el5 | 0:2.0.0.18-1.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 |
before 0:2.0.0.18-1.el5 | 0:2.0.0.18-1.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
MozillaThunderbirdopenSUSE:Tumbleweed |
before 91.1.1-1.1 | 91.1.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5012 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published November 13, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.03%, the 81st percentile. Fixed in xulrunner 1.8.0.15~pre080614h-0etch1.
References
vupen.com/english/advisories/2008/3146
debian.org/security/2009/dsa-1697
securitytracker.com/id?1021187
securityfocus.com/bid/32281
redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
Show 194 moreShow less
bugzilla.mozilla.org/show_bug.cgi?id=451619
secunia.com/advisories/32778
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
scary.beasts.org/security/CESA-2008-009.html
lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
us-cert.gov/cas/techalerts/TA08-319A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10750
mozilla.org/security/announce/2008/mfsa2008-48.html
scarybeastsecurity.blogspot.com/2008/11/firefox-cross-domain-image-theft-and.html
mandriva.com/security/advisories?name=MDVSA-2008:228
ubuntu.com/usn/usn-667-1
nvd.nist.gov/vuln/detail/CVE-2008-5012
github.com/advisories/GHSA-hfvm-r385-4pvq
access.redhat.com/errata/RHSA-2008:0976
bugzilla.redhat.com/show_bug.cgi?id=470864
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0976.json
cve.org/CVERecord?id=CVE-2008-5012
suse.com/security/cve/CVE-2007-3089
This page doesn't list everything
Left out here: 289 references. The JSON record has them.