CVE-2008-5507: canonical ubuntu_linux

CVSS: 6.0v2.0MediumModified

Published 17-12-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-5507 is a medium (CVSS 6.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 1.66% chance of exploitation in the next 30 days, higher than 76.3% of scored vulnerabilities.

Overall risk

24/100

0100

Low · default modelHow is this calculated?

CVSS score

6.0/10

010

Medium · v2.0 (NVD)

EPSS score

1.66%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 1

DSA-1696-1 DSA-1697-1 DSA-1704-1 DSA-1707-1 OPENSUSE-SU-2024:10601-1 RHSA-2008:1036+2 more

Timeline

17-12-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.

CVSS metrics

1 score · 1 source · 1 version

v2.06.0

EPSS trend

Probability

1.66%

Chance of exploitation in the next 30 days

Percentile

76%

Versus all other CVEs

30-day change

0.00 pp

From 1.66% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.66%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected systems

Mozilla3 products

firefox≥ 2.0, < 2.0.0.19 | ≥ 3.0, < 3.0.5
seamonkey≥ 1.0, < 1.1.14
thunderbird≥ 2.0, < 2.0.0.19

Canonical1 product

ubuntu_linuxEOL6.06 | 7.10 | 8.04 | 8.10

Debian1 product

debian_linuxEOL4.0 | 5.0

3 vendors · 5 products

References

44 links

www.securityfocus.com/bid/32882VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/33408Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2009/dsa-1697Vendor AdvisoryX Refsource DEBIANThird Party Advisory
usn.ubuntu.com/690-3/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/33205Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33421Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33232Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-1036.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.vupen.com/english/advisories/2009/0977VDB EntryX Refsource VUPENThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376VDB EntrySignatureX Refsource OVALThird Party Advisory

Show all 44 references

www.ubuntu.com/usn/usn-690-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securityfocus.com/archive/1/499353/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/usn-701-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/33231Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:245Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
usn.ubuntu.com/690-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2009:012Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/33203Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33433Third Party AdvisoryX Refsource SECUNIA
scary.beasts.org/security/CESA-2008-011.htmlX Refsource MISCThird Party Advisory
www.debian.org/security/2009/dsa-1707Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/33216Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.securitytracker.com/id?1021423VDB EntryX Refsource SECTRACKThird Party Advisory
www.mozilla.org/security/announce/2008/mfsa2008-65.htmlX Refsource CONFIRMVendor Advisory
www.redhat.com/support/errata/RHSA-2008-1037.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.debian.org/security/2009/dsa-1704Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.debian.org/security/2009/dsa-1696Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/33204Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-701-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/33184Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/47413VDB EntryX Refsource XFThird Party Advisory
www.redhat.com/support/errata/RHSA-2009-0002.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.mandriva.com/security/advisories?name=MDVSA-2008:244Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/33415Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33188Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33523Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/35080Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=461735X Refsource MISCIssue TrackingVendor Advisory
secunia.com/advisories/33547Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33434Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33189Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34501Third Party AdvisoryX Refsource SECUNIA

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities