LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before sending them to the Java plugin, which allows remote attackers to access arbitrary ports on the local machine. NOTE: this is closely related to CVE-2008-1195.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefox-develUpgrade thunderbirdUpgrade linux-seamonkey-develUpgrade firefoxUpgrade linux-flockUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade flock | Dec 10, 2025 | Mar 30, 2008 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey. | Oct 30, 2017 | Mar 27, 2008 |
| Mfsa2008 18 | — | Upgrade to Mozilla Firefox version 2.0.0.13 | Jun 14, 2012 | Mar 27, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.9 | Feb 3, 2012 | Mar 27, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-32bitUpgrade epiphany-docUpgrade seamonkey-spellcheckerUpgrade mozilla-develUpgrade mozilla-xulrunner181Upgrade seamonkey-mailUpgrade epiphanyUpgrade mozilla-mailUpgrade mozilla-ircUpgrade mozillaUpgrade mozilla-csUpgrade seamonkey-venkmanUpgrade seamonkey-ircUpgrade mozilla-huUpgrade epiphany-extensionsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner181-l10nUpgrade seamonkeyUpgrade mozilla-xulrunner181-64bitUpgrade epiphany-develUpgrade suse-releaseUpgrade mozilla-venkmanUpgrade seamonkey-dom-inspectorUpgrade mozilla-dom-inspectorUpgrade mozilla-calendarUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner181-develUpgrade mozilla-deat | Feb 17, 2015 | Mar 27, 2008 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Mar 28, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub