Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-3198
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-3198

Description:
Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/44199

CONFIRM
  http://www.mozilla.org/security/announce/2008/mfsa2008-35.html

BID
  30244


Return to the previous page.