Skip to navigation

CVE Database

CVE-2008-1235

Impact: Critical
Public: 2008-03-25
Bugzilla: 438717: CVE-2008-1235 chrome privilege via wrong principal

Details

The MITRE CVE dictionary describes this issue as:

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."

Find out more about CVE-2008-1235 from the MITRE CVE dictionary and NIST NVD.

Red Hat security errata

Platform Errata Release Date
RHEL Optional Productivity Applications version 5 (thunderbird) RHSA-2008:0209 April 03, 2008
Red Hat Enterprise Linux Desktop version 5 (thunderbird) RHSA-2008:0209 April 03, 2008
Red Hat Enterprise Linux version 2.1 (seamonkey) RHSA-2008:0208 March 27, 2008
Red Hat Enterprise Linux version 3 (seamonkey) RHSA-2008:0208 March 27, 2008
Red Hat Enterprise Linux version 4 (firefox) RHSA-2008:0207 March 27, 2008
Red Hat Enterprise Linux version 4 (seamonkey) RHSA-2008:0208 March 27, 2008
Red Hat Enterprise Linux version 4 (thunderbird) RHSA-2008:0209 April 03, 2008
Red Hat Enterprise Linux version 5 (firefox) RHSA-2008:0207 March 27, 2008

External References

This page is generated automatically and has not been checked for errors or omissions.

For clarification or corrections please contact the Red Hat Security Response Team.