CVE-2008-2808
The MITRE CVE dictionary describes this issue as:
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.
Find out more about CVE-2008-2808 from the MITRE CVE dictionary dictionary and NIST NVD.
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux 4 (firefox) | RHSA-2008:0549 | 2008-07-02 |
| Red Hat Enterprise Linux 3 (seamonkey) | RHSA-2008:0547 | 2008-07-02 |
| Red Hat Enterprise Linux 5 (thunderbird) | RHSA-2008:0616 | 2008-07-23 |
| Red Hat Enterprise Linux 5 | RHSA-2008:0569 | 2008-07-02 |
| Red Hat Enterprise Linux 4 (seamonkey) | RHSA-2008:0547 | 2008-07-02 |
| Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) (thunderbird) | RHSA-2008:0616 | 2008-07-23 |
| Red Hat Enterprise Linux 4 (thunderbird) | RHSA-2008:0616 | 2008-07-23 |
| Red Hat Enterprise Linux 2.1 (seamonkey) | RHSA-2008:0547 | 2008-07-02 |
CVE description copyright © 2017, The MITRE Corporation