CVE-2008-4058
Fixed in a distro release EPSS 5%
The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | iceape | 1.0.13~pre080614i-0etch1 |
| Debian 4.0 | icedove | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 |
| Debian 4.0 | iceweasel | 2.0.0.17-0etch1 |
| Debian 4.0 | xulrunner | 1.8.0.15~pre080614h-0etch1 |
| Red Hat Enterprise Linux 2.1 | seamonkey | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-chat | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-devel | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-dom-inspector | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-js-debugger | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-mail | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr-devel | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss-devel | 0:1.0.9-0.20.el2 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.9-0.24.el3 |
| Red Hat Enterprise Linux 4 | devhelp | 0:0.10-0.10.el4 |
| Red Hat Enterprise Linux 4 | devhelp-debuginfo | 0:0.10-0.10.el4 |
| Red Hat Enterprise Linux 4 | devhelp-devel | 0:0.10-0.10.el4 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.0.2-3.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.0.2-3.el4 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.9-26.el4 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.12-16.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.12-16.el4 |
| Red Hat Enterprise Linux 5 | devhelp | 0:0.12-19.el5 |
| Red Hat Enterprise Linux 5 | devhelp-debuginfo | 0:0.12-19.el5 |
| Red Hat Enterprise Linux 5 | devhelp-devel | 0:0.12-19.el5 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.0.2-3.el5 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.0.2-3.el5 |
| Red Hat Enterprise Linux 5 | nss | 0:3.12.1.1-1.el5 |
| Red Hat Enterprise Linux 5 | nss-debuginfo | 0:3.12.1.1-1.el5 |
| Red Hat Enterprise Linux 5 | nss-devel | 0:3.12.1.1-1.el5 |
| Red Hat Enterprise Linux 5 | nss-pkcs11-devel | 0:3.12.1.1-1.el5 |
| Red Hat Enterprise Linux 5 | nss-tools | 0:3.12.1.1-1.el5 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:2.0.0.17-1.el5 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:2.0.0.17-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.0.2-5.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.0.2-5.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.0.2-5.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-devel-unstable | 0:1.9.0.2-5.el5 |
| Red Hat Enterprise Linux 5 | yelp | 0:2.16.0-21.el5 |
| Red Hat Enterprise Linux 5 | yelp-debuginfo | 0:2.16.0-21.el5 |
| Red Hat rhel productivity 5 | thunderbird | 0:2.0.0.17-1.el5 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:2.0.0.17-1.el5 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |