CVE-2008-5024
Fixed in a distro release EPSS 4%
Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | iceape | 1.0.13~pre080614i-0etch1 |
| Debian 4.0 | icedove | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 |
| Debian 4.0 | iceweasel | 2.0.0.18-0etch1 |
| Debian 4.0 | xulrunner | 1.8.0.15~pre080614h-0etch1 |
| Red Hat Enterprise Linux 2.1 | seamonkey | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-chat | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-devel | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-dom-inspector | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-js-debugger | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-mail | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr-devel | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss-devel | 0:1.0.9-0.21.el2 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.9-0.25.el3 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.0.4-1.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.0.4-1.el4 |
| Red Hat Enterprise Linux 4 | nss | 0:3.12.1.1-3.el4 |
| Red Hat Enterprise Linux 4 | nss-debuginfo | 0:3.12.1.1-3.el4 |
| Red Hat Enterprise Linux 4 | nss-devel | 0:3.12.1.1-3.el4 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.9-28.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.9-28.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.9-28.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.9-28.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.9-28.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.9-28.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.9-28.el4 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.12-17.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.12-17.el4 |
| Red Hat Enterprise Linux 5 | devhelp | 0:0.12-20.el5 |
| Red Hat Enterprise Linux 5 | devhelp-debuginfo | 0:0.12-20.el5 |
| Red Hat Enterprise Linux 5 | devhelp-devel | 0:0.12-20.el5 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.0.4-1.el5 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.0.4-1.el5 |
| Red Hat Enterprise Linux 5 | nss | 0:3.12.1.1-3.el5 |
| Red Hat Enterprise Linux 5 | nss-debuginfo | 0:3.12.1.1-3.el5 |
| Red Hat Enterprise Linux 5 | nss-devel | 0:3.12.1.1-3.el5 |
| Red Hat Enterprise Linux 5 | nss-pkcs11-devel | 0:3.12.1.1-3.el5 |
| Red Hat Enterprise Linux 5 | nss-tools | 0:3.12.1.1-3.el5 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:2.0.0.18-1.el5 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:2.0.0.18-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.0.4-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.0.4-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.0.4-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-devel-unstable | 0:1.9.0.4-1.el5 |
| Red Hat Enterprise Linux 5 | yelp | 0:2.16.0-22.el5 |
| Red Hat Enterprise Linux 5 | yelp-debuginfo | 0:2.16.0-22.el5 |
| Red Hat rhel productivity 5 | thunderbird | 0:2.0.0.18-1.el5 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:2.0.0.18-1.el5 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |