{"id":"CVE-2008-4066","aliases":["DSA-1649-1","DSA-1669-1","EUVD-2008-4051","GHSA-qqhw-rv6h-rvpx","RHSA-2008:0882","RHSA-2008:0908"],"status":"published","title":"Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass...","description":"Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a \"jav\u0026#56325ascript\" sequence, aka \"HTML escaped low surrogates bug.\"","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01761,"percentile":0.78175,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2008-09-24T18:00:00Z","modified":"2026-06-26T10:09:59Z","affected":[{"source":"osv","ecosystem":"Debian:4.0","package":"iceweasel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.17-0etch1"}]}],"versions":["2.0.0.10-0etch1","2.0.0.10-1","2.0.0.10-2","2.0.0.11-1","2.0.0.12-0etch1","2.0.0.12-1","2.0.0.12-2","2.0.0.13-0etch1","2.0.0.13-1","2.0.0.14-0etch1","2.0.0.14-1","2.0.0.14-2","2.0.0.15-0etch1","2.0.0.16-0etch1","2.0.0.3-1","2.0.0.3-2","2.0.0.4-0etch1","2.0.0.4-1","2.0.0.5-0etch1","2.0.0.5-0etch1+lenny1","2.0.0.5-1","2.0.0.5-2","2.0.0.6+2.0.0.8-0etch1","2.0.0.6-0etch1","2.0.0.6-0etch1+lenny1","2.0.0.6-1","2.0.0.7-1","2.0.0.7-2","2.0.0.8-1","2.0.0.9-1","2.0.0.9-2"],"bundled":14},{"source":"osv","ecosystem":"Debian:4.0","package":"xulrunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.15~pre080614h-0etch1"}]}],"versions":["1.8.0.11-2","1.8.0.11-3","1.8.0.11-4","1.8.0.11-4.1","1.8.0.12-0etch1","1.8.0.13~pre070720-0etch1","1.8.0.13~pre070720-0etch2","1.8.0.13~pre070720-0etch3","1.8.0.13~pre070720-0etch3+lenny1","1.8.0.14~pre071019b-0etch1","1.8.0.14~pre071019b-0lenny1","1.8.0.14~pre071019c-0etch1","1.8.0.15~pre080131a-0etch1","1.8.0.15~pre080131b-0etch1","1.8.0.15~pre080323b-0etch1","1.8.0.15~pre080323b-0etch2","1.8.0.15~pre080614d-0etch1"],"bundled":28},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.20.el2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.24.el3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10-0.10.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-26.el4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-16.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-16.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-16.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-16.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-16.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-16.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-16.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-16.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.17-1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.17-1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.17-1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.17-1.el5"}]}],"bundled":12}],"products":[{"vendor":"mozilla","product":"firefox"}],"references":[{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-43.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/32025","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.405232","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8880","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securitytracker.com/id?1020920","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000058.html","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://www.thespanner.co.uk/2008/06/30/javascript-protocol-fuzz-results/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/32144","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32010","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://www.securityfocus.com/bid/31346","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/31985","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/31984","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32185","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/32196","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448166","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45358","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.debian.org/security/2008/dsa-1669","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/32042","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.379422","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"]},{"url":"http://secunia.com/advisories/32092","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://jvn.jp/en/jp/JVN96950482/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://secunia.com/advisories/32007","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32845","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://blogs.technet.com/bluehat/archive/2008/08/14/targeted-fuzzing.aspx","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1649","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/32012","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.412123","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"]},{"url":"http://secunia.com/advisories/32044","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34501","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32082","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4066","tags":["advisory"]},{"url":"http://www.thespanner.co.uk/2008/06/30/javascript-protocol-fuzz-results"},{"url":"https://github.com/advisories/GHSA-qqhw-rv6h-rvpx"},{"url":"https://access.redhat.com/errata/RHSA-2008:0882","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463251","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0882.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0016","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0016","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3835","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3835","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3837","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3837","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3837","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4058","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4058","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4059","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4060","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4060","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4061","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4061","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4061","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4062","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4062","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4065","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4066","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4066","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4067","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4067","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4068","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4068","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4069","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4069","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0908","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464041","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0908.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4070","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-4066","description":"Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a \"jav\u0026#56325ascript\" sequence, aka \"HTML escaped low surrogates bug.\"","status":"published","published":"2008-09-24T18:00:00Z","modified":"2024-08-07T10:00:42.435Z","updated_at":"2026-11-02T14:34:46.950176Z"}],"euvd":[{"id":"EUVD-2008-4051","description":"Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a \"jav\u0026#56325ascript\" sequence, aka \"HTML escaped low surrogates bug.\"","status":"published","published":"2008-09-24T18:00:00Z","modified":"2024-08-07T10:00:42Z","updated_at":"2026-11-03T01:38:49.434096Z"}],"ghsa":[{"id":"GHSA-qqhw-rv6h-rvpx","title":"Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass...","description":"Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a \"jav\u0026#56325ascript\" sequence, aka \"HTML escaped low surrogates bug.\"","status":"published","published":"2022-05-02T00:06:28Z","modified":"2025-04-09T03:59:44Z","cwes":["CWE-79"],"updated_at":"2026-11-02T15:00:58.052014Z"}],"nvd":[{"id":"CVE-2008-4066","description":"Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a \"jav\u0026#56325ascript\" sequence, aka \"HTML escaped low surrogates bug.\"","status":"published","published":"2008-09-24T20:37:04.737Z","modified":"2026-06-16T22:57:06.2Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:28.625777Z"}],"osv":[{"id":"DSA-1649-1","title":"iceweasel - several vulnerabilities","status":"published","published":"2008-10-08T00:00:00Z","modified":"2026-03-09T01:19:45.983987Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"DSA-1669-1","title":"xulrunner - several vulnerabilities","status":"published","published":"2008-11-23T00:00:00Z","modified":"2026-03-09T01:19:30.291606Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"RHSA-2008:0882","title":"Red Hat Security Advisory: seamonkey security update","status":"published","published":"2024-09-15T17:30:46Z","modified":"2026-06-26T10:09:52Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2008:0908","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-15T17:33:34Z","modified":"2026-06-26T10:09:59Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}