Oval Definition:oval:org.mitre.oval:def:9643
Revision Date:2013-04-29Version:12
Title:The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
Description:The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2008-3835
Platform(s):CentOS Linux 3
CentOS Linux 4
CentOS Linux 5
Oracle Linux 4
Oracle Linux 5
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Red Hat Enterprise Linux 5
Product(s):
Definition Synopsis
  • OS Section: RHEL3, CentOS3
  • RHEL3 or CentOS3
  • The operating system installed on the system is Red Hat Enterprise Linux 3
  • OR CentOS Linux 3.x
  • AND Configuration section
  • seamonkey-nspr is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-mail is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-chat is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-devel is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-nss is earlier than 0:1.0.9-0.24.el3
  • OR OS Section: RHEL4, CentOS4, Oracle Linux 4
  • RHEL4, CentOS4 or Oracle Linux 4
  • The operating system installed on the system is Red Hat Enterprise Linux 4
  • OR CentOS Linux 4.x
  • OR Oracle Linux 4.x
  • AND Configuration section
  • devhelp-devel is earlier than 0:0.10-0.10.el4
  • OR seamonkey-js-debugger is earlier than 0:1.0.9-26.el4
  • OR thunderbird is earlier than 0:1.5.0.12-16.el4
  • OR seamonkey is earlier than 0:1.0.9-26.el4
  • OR devhelp is earlier than 0:0.10-0.10.el4
  • OR seamonkey-mail is earlier than 0:1.0.9-26.el4
  • OR seamonkey-chat is earlier than 0:1.0.9-26.el4
  • OR seamonkey-devel is earlier than 0:1.0.9-26.el4
  • OR seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4
  • OR OS Section: RHEL5, CentOS5, Oracle Linux 5
  • RHEL5, CentOS5 or Oracle Linux 5
  • The operating system installed on the system is Red Hat Enterprise Linux 5
  • OR The operating system installed on the system is CentOS Linux 5.x
  • OR Oracle Linux 5.x
  • AND thunderbird is earlier than 0:2.0.0.17-1.el5
  • BACK