SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Web Browser)  >   Mozilla Firefox Vendors:   Mozilla.org
Mozilla Firefox loadBindingDocument Lets Remote Users Obtain Information
SecurityTracker Alert ID:  1021424
SecurityTracker URL:  http://securitytracker.com/id/1021424
CVE Reference:   CVE-2008-5503   (Links to External Site)
Date:  Dec 17 2008
Impact:   Disclosure of user information
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 2.x prior to 2.0.0.19
Description:   A vulnerability was reported in Mozilla Firefox. A remote user can obtain potentially sensitive information.

A remote user can exploit XBL bindings to read information from other domains from the target user's browser.

Thunderbird and SeaMonkey are affected.

Boris Zbarsky reported this vulnerability.

Impact:   A remote user can obtain potentially sensitive information from other domains on the target user's browser.
Solution:   The vendor has issued a fix (2.0.0.19).

The vendor's advisory is available at:

http://www.mozilla.org/security/announce/2008/mfsa2008-61.html

Vendor URL:  www.mozilla.org/security/announce/2008/mfsa2008-61.html (Links to External Site)
Cause:   Access control error
Underlying OS:  Linux (Any), UNIX (Any), Windows (Any)

Message History:   This archive entry has one or more follow-up message(s) listed below.
Dec 17 2008 (Mozilla Issues Fix for SeaMonkey) Mozilla Firefox loadBindingDocument Lets Remote Users Obtain Information
Mozilla has issued a fix for SeaMonkey.
Dec 17 2008 (Red Hat Issues Fix for SeaMonkey) Mozilla Firefox loadBindingDocument Lets Remote Users Obtain Information
Red Hat has released a fix for SeaMonkey for Red Hat Enterprise Linux 2.1, 3, and 4.
Dec 30 2008 (Mozilla Issues Fix for Thunderbird) Mozilla Firefox loadBindingDocument Lets Remote Users Obtain Information
Mozilla has released a fix for Thunderbird.
Jan 8 2009 (Red Hat Issues Fix for Thunderbird) Mozilla Firefox loadBindingDocument Lets Remote Users Obtain Information
Red Hat has released a fix for Mozilla Thunderbird for Red Hat Enterprise Linux 4 and 5.
May 15 2009 (Sun Issues Fix for Thunderbird) Mozilla Firefox loadBindingDocument Lets Remote Users Obtain Information
Sun has issued a fix for Thunderbird for Solaris 10 and OpenSolaris.
May 15 2009 (Sun Issues Fix for Thunderbird) Mozilla Firefox loadBindingDocument Lets Remote Users Obtain Information
Sun has issued a fix for Thunderbird for Solaris 10 and OpenSolaris.



 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC