CVE-2008-3835
Fixed in a distro release EPSS 2%
The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | iceape | 1.0.13~pre080614i-0etch1 |
| Debian 4.0 | icedove | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 |
| Debian 4.0 | iceweasel | 2.0.0.17-0etch1 |
| Debian 4.0 | xulrunner | 1.8.0.15~pre080614h-0etch1 |
| Red Hat Enterprise Linux 2.1 | seamonkey | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-chat | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-devel | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-dom-inspector | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-js-debugger | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-mail | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr-devel | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss-devel | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 4 | devhelp | 0:0.10-0.10.el4 |
| Red Hat Enterprise Linux 4 | devhelp-debuginfo | 0:0.10-0.10.el4 |
| Red Hat Enterprise Linux 4 | devhelp-devel | 0:0.10-0.10.el4 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.12-16.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.12-16.el4 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:2.0.0.17-1.el5 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:2.0.0.17-1.el5 |
| Red Hat rhel productivity 5 | thunderbird | 0:2.0.0.17-1.el5 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:2.0.0.17-1.el5 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |