Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-toolsUpgrade devhelpUpgrade nss-pkcs11-develUpgrade firefoxUpgrade nssUpgrade nss-develUpgrade xulrunner-devel-unstableUpgrade devhelp-develUpgrade xulrunner-develUpgrade yelpUpgrade xulrunner | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefox | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 51 | — | Upgrade to Mozilla Firefox version 3.0.4 | Jun 14, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade devhelpUpgrade nss-develUpgrade nss-pkcs11-develUpgrade yelpUpgrade nss-toolsUpgrade xulrunnerUpgrade nssUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade devhelp-develUpgrade firefox | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-64bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-translations-64bitUpgrade suse-releaseUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefox-translations | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefoxUpgrade abrowser | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub