CVE-2008-0594: mozilla firefox
Vulnerability summary
CVE-2008-0594 is a medium (CVSS 5.0) vulnerability in mozilla firefox. EPSS estimates a 1.97% chance of exploitation in the next 30 days, higher than 80% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 2Timeline
- 09-02-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.97%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
0.00 pp
From 1.97% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.mozilla.org)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mozilla1 product
- firefox≤ 2.0.0.11
1 vendor · 1 product
References
34 links- browser.netscape.com/releasenotes/X Refsource CONFIRM
Show all 34 references
- support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.htmlX Refsource CONFIRM
- www.mozilla.org/security/announce/2008/mfsa2008-11.htmlX Refsource CONFIRM
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.htmlVendor AdvisoryX Refsource FEDORA
- wiki.rpath.com/Advisories:rPSA-2008-0051X Refsource CONFIRM
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.htmlVendor AdvisoryX Refsource FEDORA