CVE-2008-5022

Impact:
Moderate
Public Date:
2008-11-12
Bugzilla:
470895: CVE-2008-5022 Mozilla nsXMLHttpRequest::NotifyEventListeners() same-origin violation

The MITRE CVE dictionary describes this issue as:

The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.

Find out more about CVE-2008-5022 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 2.1 (seamonkey) RHSA-2008:0977 2008-11-13
Red Hat Enterprise Linux 3 (seamonkey) RHSA-2008:0977 2008-11-13
Red Hat Enterprise Linux 5 (thunderbird) RHSA-2008:0976 2008-11-20
Red Hat Enterprise Linux 5 RHSA-2008:0978 2008-11-13
Red Hat Enterprise Linux 4 RHSA-2008:0978 2008-11-13
Red Hat Enterprise Linux 4 (thunderbird) RHSA-2008:0976 2008-11-20
Red Hat Enterprise Linux 4 (seamonkey) RHSA-2008:0977 2008-11-13
Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) (thunderbird) RHSA-2008:0976 2008-11-20

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.