CVE-2008-3837
24.09.2008, 20:37
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 2.0.0.17 |
| mozilla | firefox | 3.0 ≤ 𝑥 < 3.0.2 |
| mozilla | seamonkey | 𝑥 < 1.1.12 |
| debian | debian_linux | 4.0 |
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 7.04 |
| canonical | ubuntu_linux | 7.10 |
| canonical | ubuntu_linux | 8.04 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||||||
| firefox-3.0 |
| ||||||||||||||||||||
| iceape |
| ||||||||||||||||||||
| seamonkey |
| ||||||||||||||||||||
| xulrunner |
| ||||||||||||||||||||
| xulrunner-1.9 |
|
References