Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-nss-develUpgrade seamonkey-mailUpgrade seamonkey-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade seamonkey-nspr-develUpgrade seamonkey-nss | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 62 | — | Upgrade to Mozilla Firefox version 2.0.0.19 | Jun 14, 2012 | Dec 17, 2008 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Dec 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub