Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade devhelp-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-js-debuggerUpgrade firefoxUpgrade seamonkeyUpgrade seamonkey-develUpgrade devhelpUpgrade seamonkey-chat | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-flockUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkey-develUpgrade linux-firefoxUpgrade firefoxUpgrade flock | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 40 | — | Upgrade to Mozilla Firefox version 2.0.0.17Upgrade to Mozilla Firefox version 3.0.2 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade devhelp-develUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade devhelpUpgrade nss-develUpgrade xulrunnerUpgrade yelpUpgrade xulrunner-develUpgrade firefoxUpgrade nssUpgrade nss-tools | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-64bitUpgrade mozillaUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-dom-inspectorUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-deatUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkeyUpgrade gecko-sdkUpgrade mozilla-calendarUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefox-translationsUpgrade mozilla-develUpgrade mozilla-mailUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-ircUpgrade suse-releaseUpgrade mozilla-venkmanUpgrade mozilla-xulrunner181Upgrade mozilla-huUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-ircUpgrade seamonkey-mailUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-develUpgrade seamonkey-spellcheckerUpgrade mozilla-csUpgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefox | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefoxUpgrade firefox-3.0Upgrade xulrunner-1.9 | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub