CVE-2008-5015

Publication date 13 November 2008

Last updated 24 July 2024

Ubuntu priority

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox	8.10 intrepid	Not in release
	8.04 LTS hardy	Fixed 2.0.0.19+nobinonly1-0ubuntu0.8.04.1
	7.10 gutsy	Fixed 2.0.0.18+nobinonly-0ubuntu0.7.10
	6.06 LTS dapper	Fixed 1.5.dfsg+1.5.0.15~prepatch080614h-0ubuntu1
firefox-3.0	8.10 intrepid	Fixed 3.0.4+nobinonly-0ubuntu0.8.10.1
	8.04 LTS hardy	Fixed 3.0.4+nobinonly-0ubuntu0.8.04.1
	7.10 gutsy	Ignored end of life, was needed
	6.06 LTS dapper	Not in release
xulrunner-1.9	8.10 intrepid	Fixed 1.9.0.4+nobinonly-0ubuntu0.8.10.1
	8.04 LTS hardy	Fixed 1.9.0.4+nobinonly-0ubuntu0.8.04.1
	7.10 gutsy	Ignored end of life, was needed
	6.06 LTS dapper	Not in release

CVE-2008-5015

Status

References

Related Ubuntu Security Notices (USN)

Other references