{"schemaVersion":3,"id":"CVE-2008-0418","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using \"flat\" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.","dates":{"published":"2008-02-08T21:00:00.000Z","modified":"2024-08-07T07:46:54.336Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.08633,"percentile":0.95061,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.08633},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.08633,"percentile":0.95061}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.08633,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.08633,"percentile":0.95061}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"31051","name":"Mozilla Firefox 2.0 - 'chrome://' URI JavaScript File Request Information Disclosure","source":"exploit-database","url":"https://www.exploit-db.com/exploits/31051","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"linux","file":"exploits/linux/remote/31051.txt","codes":["CVE-2008-0418","OSVDB-41187"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.0.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0.0.11","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.1.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.1.7","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.0.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0.0.11","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","label":"www.redhat.com/support/errata/RHSA-2008-0104.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.ubuntu.com/usn/usn-582-2","label":"www.ubuntu.com/usn/usn-582-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.securitytracker.com/id?1019329","label":"www.securitytracker.com/id?1019329","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.ubuntu.com/usn/usn-576-1","label":"www.ubuntu.com/usn/usn-576-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://browser.netscape.com/releasenotes/","label":"browser.netscape.com/releasenotes/","hostname":"browser.netscape.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/28939","label":"secunia.com/advisories/28939","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2008/dsa-1506","label":"www.debian.org/security/2008/dsa-1506","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.kb.cert.org/vuls/id/309608","label":"www.kb.cert.org/vuls/id/309608","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","label":"slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","hostname":"slackware.com","tags":["Vendor Advisory","X Refsource SLACKWARE"]},{"url":"https://issues.rpath.com/browse/RPL-1995","label":"issues.rpath.com/browse/RPL-1995","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","label":"www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","label":"www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","label":"wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","hostname":"wiki.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/28766","label":"secunia.com/advisories/28766","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/28622/","label":"secunia.com/advisories/28622/","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/28818","label":"secunia.com/advisories/28818","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/30620","label":"secunia.com/advisories/30620","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/28865","label":"secunia.com/advisories/28865","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/29049","label":"secunia.com/advisories/29049","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","label":"www.vupen.com/english/advisories/2008/0453/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","label":"www.redhat.com/support/errata/RHSA-2008-0103.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/28877","label":"secunia.com/advisories/28877","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/28879","label":"secunia.com/advisories/28879","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-582-1","label":"www.ubuntu.com/usn/usn-582-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/29167","label":"secunia.com/advisories/29167","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/29567","label":"secunia.com/advisories/29567","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","label":"www.redhat.com/support/errata/RHSA-2008-0105.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/28958","label":"secunia.com/advisories/28958","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","label":"support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","hostname":"support.novell.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/30327","label":"secunia.com/advisories/30327","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","label":"www.securityfocus.com/archive/1/488971/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.debian.org/security/2008/dsa-1489","label":"www.debian.org/security/2008/dsa-1489","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-05.html","label":"www.mozilla.org/security/announce/2008/mfsa2008-05.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM"]},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","label":"www.securityfocus.com/archive/1/488002/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","label":"www.securityfocus.com/archive/1/487826/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/29086","label":"secunia.com/advisories/29086","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/28815","label":"secunia.com/advisories/28815","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","label":"www.vupen.com/english/advisories/2008/0454/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://secunia.com/advisories/28864","label":"secunia.com/advisories/28864","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2008/dsa-1485","label":"www.debian.org/security/2008/dsa-1485","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/28924","label":"secunia.com/advisories/28924","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","label":"www.vupen.com/english/advisories/2008/1793/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","label":"wiki.rpath.com/Advisories:rPSA-2008-0093","hostname":"wiki.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","label":"www.vupen.com/english/advisories/2008/2091/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","label":"lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","label":"www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://secunia.com/advisories/29164","label":"secunia.com/advisories/29164","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/29211","label":"secunia.com/advisories/29211","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","label":"www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","label":"wiki.rpath.com/Advisories:rPSA-2008-0051","hostname":"wiki.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","label":"www.mandriva.com/security/advisories?name=MDVSA-2008:062","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.debian.org/security/2008/dsa-1484","label":"www.debian.org/security/2008/dsa-1484","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/28808","label":"secunia.com/advisories/28808","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0263","label":"www.vupen.com/english/advisories/2008/0263","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","label":"www.vupen.com/english/advisories/2008/0627/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","label":"www.gentoo.org/security/en/glsa/glsa-200805-18.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/28754","label":"secunia.com/advisories/28754","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/","label":"www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/","hostname":"www.hiredhacker.com","tags":["X Refsource MISC"]},{"url":"http://www.securityfocus.com/bid/27406","label":"www.securityfocus.com/bid/27406","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","label":"www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","label":"www.mandriva.com/security/advisories?name=MDVSA-2008:048","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/31043","label":"secunia.com/advisories/31043","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/29098","label":"secunia.com/advisories/29098","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/28839","label":"secunia.com/advisories/28839","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]}],"lineage":{"upstream":[],"downstream":["DSA-1484-1","DSA-1485-2","DSA-1489-1","DSA-1506-1","OPENSUSE-SU-2024:10600-1","OPENSUSE-SU-2024:14572-1","RHSA-2008:0103","RHSA-2008:0104","RHSA-2008:0105"],"duplicates":[],"related":["OPENSUSE-SU-2024:10600-1","OPENSUSE-SU-2024:14572-1"]},"timeline":[{"kind":"published","date":"2008-02-08T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T07:46:54.336Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":29,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:29:06.284Z","stale":false,"partial":false}}