CVE-2008-0593: mozilla firefox
CVSS: 4.3v2.0MediumModified
Published 09-02-2008Last modified 07-08-2024
Vulnerability summary
CVE-2008-0593 is a medium (CVSS 4.3) vulnerability in mozilla firefox. EPSS estimates a 2.04% chance of exploitation in the next 30 days, higher than 80.8% of scored vulnerabilities.
CVSS score
4.3/10
010
Medium · v2.0 (NVD)EPSS score
2.04%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 9 · Related 2Timeline
- 09-02-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.
CVSS metrics
1 score · 1 source · 1 versionMedium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
2.04%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.04% on 19-09-2026
19-09-202619-10-2026
EPSS score2.04%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mozilla2 products
- firefox≤ 2.0.0.11 | 0.2 | 0.9.2 | 1.0.2 | 1.5.0.2 | 1.5.0.12 | 1.5.2 | 2.0 | 2.0.0.1 | 2.0.0.10
- seamonkey≤ 1.1.17 | 1.0 | 1.0:alpha | 1.0:beta | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.0.9 | 1.0.99 | 1.1 | 1.1.1 | 1.1.2 | 1.1.10 | 1.1.11 | 1.1.12 | 1.1.13 | 1.1.14 | 1.1.15 | 1.1.16
1 vendor · 2 products
References
48 links- browser.netscape.com/releasenotes/X Refsource CONFIRM
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.htmlVendor AdvisoryX Refsource FEDORA
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.htmlVendor AdvisoryX Refsource FEDORA
- bugzilla.mozilla.org/show_bug.cgi?id=397427X Refsource CONFIRM
Show all 48 references
- support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.htmlX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10075VDB EntrySignatureX Refsource OVAL
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.htmlVendor AdvisoryX Refsource FEDORA
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.htmlVendor AdvisoryX Refsource FEDORA
- wiki.rpath.com/Advisories:rPSA-2008-0051X Refsource CONFIRM
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.htmlVendor AdvisoryX Refsource FEDORA
- www.mozilla.org/security/announce/2008/mfsa2008-10.htmlX Refsource CONFIRM