{"schemaVersion":3,"id":"CVE-2008-5507","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.","dates":{"published":"2008-12-17T23:00:00.000Z","modified":"2024-08-07T10:56:47.152Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6,"severity":"medium","vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0166,"percentile":0.76309,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0166},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0166,"percentile":0.76309}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0166,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0166,"percentile":0.76309}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"7.10","noFixRecorded":false,"fixedIn":null},{"text":"8.04","noFixRecorded":false,"fixedIn":null},{"text":"8.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.06 | 7.10 | 8.04 | 8.10","eol":{"isEol":true,"eolDate":"2011-06-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"6.06","label":"6.06 'Dapper Drake' (LTS)","eolFrom":"2011-06-01T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"6.06.2"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null},{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0 | 5.0","eol":{"isEol":true,"eolDate":"2010-02-15T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"4","label":"4 (Etch)","eolFrom":"2010-02-15T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"4.0r9"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.0, < 2.0.0.19","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.0, < 3.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0, < 2.0.0.19 | ≥ 3.0, < 3.0.5","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0, < 1.1.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0, < 1.1.14","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.0, < 2.0.0.19","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0, < 2.0.0.19","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":5,"eol":{"hasEol":true,"count":2},"references":[{"url":"http://www.securityfocus.com/bid/32882","label":"www.securityfocus.com/bid/32882","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","label":"secunia.com/advisories/33408","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2009/dsa-1697","label":"www.debian.org/security/2009/dsa-1697","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","label":"usn.ubuntu.com/690-3/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","label":"secunia.com/advisories/33205","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33421","label":"secunia.com/advisories/33421","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33232","label":"secunia.com/advisories/33232","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","label":"www.redhat.com/support/errata/RHSA-2008-1036.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","label":"www.vupen.com/english/advisories/2009/0977","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","label":"www.ubuntu.com/usn/usn-690-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499353/100/0/threaded","label":"www.securityfocus.com/archive/1/499353/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","label":"www.ubuntu.com/usn/usn-701-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","label":"secunia.com/advisories/33231","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","label":"www.mandriva.com/security/advisories?name=MDVSA-2008:245","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","label":"usn.ubuntu.com/690-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","label":"www.mandriva.com/security/advisories?name=MDVSA-2009:012","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","label":"secunia.com/advisories/33203","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33433","label":"secunia.com/advisories/33433","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://scary.beasts.org/security/CESA-2008-011.html","label":"scary.beasts.org/security/CESA-2008-011.html","hostname":"scary.beasts.org","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","label":"www.debian.org/security/2009/dsa-1707","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","label":"secunia.com/advisories/33216","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://www.securitytracker.com/id?1021423","label":"www.securitytracker.com/id?1021423","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-65.html","label":"www.mozilla.org/security/announce/2008/mfsa2008-65.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","label":"www.redhat.com/support/errata/RHSA-2008-1037.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","label":"www.debian.org/security/2009/dsa-1704","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","label":"www.debian.org/security/2009/dsa-1696","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","label":"secunia.com/advisories/33204","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","label":"www.ubuntu.com/usn/usn-701-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","label":"secunia.com/advisories/33184","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47413","label":"exchange.xforce.ibmcloud.com/vulnerabilities/47413","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","label":"www.redhat.com/support/errata/RHSA-2009-0002.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","label":"www.mandriva.com/security/advisories?name=MDVSA-2008:244","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","label":"secunia.com/advisories/33415","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33188","label":"secunia.com/advisories/33188","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33523","label":"secunia.com/advisories/33523","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/35080","label":"secunia.com/advisories/35080","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461735","label":"bugzilla.mozilla.org/show_bug.cgi?id=461735","hostname":"bugzilla.mozilla.org","tags":["X Refsource MISC","Issue Tracking","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33547","label":"secunia.com/advisories/33547","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33434","label":"secunia.com/advisories/33434","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33189","label":"secunia.com/advisories/33189","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/34501","label":"secunia.com/advisories/34501","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]}],"lineage":{"upstream":[],"downstream":["DSA-1696-1","DSA-1697-1","DSA-1704-1","DSA-1707-1","OPENSUSE-SU-2024:10601-1","RHSA-2008:1036","RHSA-2008:1037","RHSA-2009:0002"],"duplicates":[],"related":["OPENSUSE-SU-2024:10601-1"]},"timeline":[{"kind":"published","date":"2008-12-17T23:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T10:56:47.152Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:20:58.975Z","stale":false,"partial":false}}