CVE-2008-5504

Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 84.77%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
≤ 2.0.0.18
mozillafirefox_esr
𝑥
≤ 2.0.0.18
mozillafirefox
2.0
mozillafirefox_esr
2.0
mozillafirefox
2.0.0.1
mozillafirefox_esr
2.0.0.1
mozillafirefox
2.0.0.2
mozillafirefox_esr
2.0.0.2
mozillafirefox
2.0.0.3
mozillafirefox_esr
2.0.0.3
mozillafirefox
2.0.0.4
mozillafirefox_esr
2.0.0.4
mozillafirefox
2.0.0.5
mozillafirefox_esr
2.0.0.5
mozillafirefox
2.0.0.6
mozillafirefox_esr
2.0.0.6
mozillafirefox
2.0.0.7
mozillafirefox_esr
2.0.0.7
mozillafirefox
2.0.0.8
mozillafirefox_esr
2.0.0.8
mozillafirefox
2.0.0.9
mozillafirefox_esr
2.0.0.9
mozillafirefox
2.0.0.10
mozillafirefox_esr
2.0.0.10
mozillafirefox
2.0.0.11
mozillafirefox_esr
2.0.0.11
mozillafirefox
2.0.0.12
mozillafirefox_esr
2.0.0.12
mozillafirefox
2.0.0.13
mozillafirefox_esr
2.0.0.13
mozillafirefox
2.0.0.14
mozillafirefox_esr
2.0.0.14
mozillafirefox
2.0.0.15
mozillafirefox_esr
2.0.0.15
mozillafirefox
2.0.0.16
mozillafirefox_esr
2.0.0.16
mozillafirefox
2.0.0.17
mozillafirefox_esr
2.0.0.17
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
dapper
Fixed 1.5.dfsg+1.5.0.15~prepatch080614i-0ubuntu1
released
gutsy
Fixed 2.0.0.19+nobinonly1-0ubuntu0.7.10.1
released
hardy
Fixed 2.0.0.19+nobinonly1-0ubuntu0.8.04.1
released
intrepid
dne
Common Weakness Enumeration
References