CVE-2008-0414

Impact:
Moderate
Public Date:
2008-02-07
Bugzilla:
432040: CVE-2008-0414 mozilla: multiple file input focus stealing vulnerabilities

The MITRE CVE dictionary describes this issue as:

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."

Find out more about CVE-2008-0414 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

Red Hat is aware of this issue and is tracking it via the following bug:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-0414

The Red Hat Security Response Team has rated this issue as having moderate security impact, a future updates will address this flaw. More information regarding issue severity can be found here:
http://www.redhat.com/security/updates/classification/

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 4 (seamonkey) RHSA-2008:0208 2008-03-27
Red Hat Enterprise Linux 3 (seamonkey) RHSA-2008:0208 2008-03-27
Red Hat Enterprise Linux 2.1 (seamonkey) RHSA-2008:0208 2008-03-27
Last Modified

CVE description copyright © 2017, The MITRE Corporation