CVE-2008-5023

Impact:
Moderate
Public Date:
2008-11-12
Bugzilla:
470898: CVE-2008-5023 Mozilla -moz-binding property bypasses security checks on codebase principals

The MITRE CVE dictionary describes this issue as:

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file.

Find out more about CVE-2008-5023 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 2.1 (seamonkey) RHSA-2008:0977 2008-11-13
Red Hat Enterprise Linux 3 (seamonkey) RHSA-2008:0977 2008-11-13
Red Hat Enterprise Linux 5 RHSA-2008:0978 2008-11-13
Red Hat Enterprise Linux 4 RHSA-2008:0978 2008-11-13
Red Hat Enterprise Linux 4 (seamonkey) RHSA-2008:0977 2008-11-13

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.