CVE-2008-2800: mozilla firefox Cross-site Scripting

EPSS trend

Probability

2.00%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

0.00 pp

From 2.00% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.00%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

48 links

lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.htmlVendor AdvisoryX Refsource SUSE
bugzilla.mozilla.org/show_bug.cgi?id=433328X Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2008-0549.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2009/dsa-1697Vendor AdvisoryX Refsource DEBIAN
www.mozilla.org/security/announce/2008/mfsa2008-22.htmlX Refsource CONFIRM
secunia.com/advisories/31021Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9386VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/30898Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/Advisories:rPSA-2008-0216X Refsource CONFIRM
issues.rpath.com/browse/RPL-2646X Refsource CONFIRM

Show all 48 references

secunia.com/advisories/30949Third Party AdvisoryX Refsource SECUNIA
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152Vendor AdvisoryX Refsource SLACKWARE
www.vupen.com/english/advisories/2009/0977VDB EntryX Refsource VUPEN
secunia.com/advisories/31069Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31008Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31377Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2008-0616.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2008/1993/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/31023Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/30038VDB EntryX Refsource BID
www.debian.org/security/2008/dsa-1607Vendor AdvisoryX Refsource DEBIAN
security.gentoo.org/glsa/glsa-200808-03.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/31005Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33433Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.htmlVendor AdvisoryX Refsource FEDORA
www.securitytracker.com/id?1020419VDB EntryX Refsource SECTRACK
www.mozilla.org/projects/security/known-vulnerabilities.htmlX Refsource CONFIRM
secunia.com/advisories/31183Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30903Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0547.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.htmlVendor AdvisoryX Refsource FEDORA
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Vendor AdvisoryX Refsource SUNALERT
bugzilla.mozilla.org/show_bug.cgi?id=439035X Refsource CONFIRM
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911Vendor AdvisoryX Refsource SLACKWARE
bugzilla.mozilla.org/show_bug.cgi?id=428672X Refsource CONFIRM
www.debian.org/security/2008/dsa-1615Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/31195Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31076Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-619-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/30911Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2008-0569.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/30878Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/494080/100/0/threadedMailing ListX Refsource BUGTRAQ
www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/34501Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=432591X Refsource CONFIRM
bugzilla.mozilla.org/show_bug.cgi?id=440308X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2008:136Vendor AdvisoryX Refsource MANDRIVA

Related vulnerabilities

CVE-2013-1735mozillafirefox+34.73%13y ago18-09-2013 10:00Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling.CVE-2013-1718mozillafirefox+35.44%13y ago18-09-2013 10:00Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.CVE-2013-1717mozillafirefox+32.40%13y ago07-08-2013 01:00Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.CVE-2013-1723mozillafirefox+21.80%13y ago18-09-2013 10:00The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service (application crash) by leveraging incorrect event usage after widget-memory reallocation.CVE-2013-1713mozillafirefox+31.62%13y ago07-08-2013 01:00Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.CVE-2013-1708mozillafirefox+13.18%13y ago07-08-2013 01:00Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.

All vulnerabilities infirefox seamonkey

CVE-2008-2800: mozilla firefox Cross-site Scripting

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References