CVE-2008-4065
24.09.2008, 20:37
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka "Stripped BOM characters bug."
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 2.0.0.17 |
| mozilla | firefox | 3.0 ≤ 𝑥 < 3.0.2 |
| mozilla | seamonkey | 𝑥 < 1.1.12 |
| mozilla | thunderbird | 𝑥 < 2.0.0.17 |
| debian | debian_linux | 4.0 |
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 7.04 |
| canonical | ubuntu_linux | 7.10 |
| canonical | ubuntu_linux | 8.04 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||||||
| firefox-3.0 |
| ||||||||||||||||||||
| iceape |
| ||||||||||||||||||||
| mozilla-thunderbird |
| ||||||||||||||||||||
| seamonkey |
| ||||||||||||||||||||
| thunderbird |
| ||||||||||||||||||||
| xulrunner |
| ||||||||||||||||||||
| xulrunner-1.9 |
|
References