QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-1240

Back to search

CVE-2008-1240

Published: Mar 28, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before sending them to the Java plugin, which allows remote attackers to access arbitrary ports on the local machine. NOTE: this is closely related to CVE-2008-1195.

VendorProductVersions

n/a

n/a

affected
n/a

References

20080327 rPSA-2008-0128-1 firefox
mailing-list
x_refsource_BUGTRAQ
29541
third-party-advisory
x_refsource_SECUNIA
29539
third-party-advisory
x_refsource_SECUNIA
30620
third-party-advisory
x_refsource_SECUNIA
29560
third-party-advisory
x_refsource_SECUNIA
DSA-1532
vendor-advisory
x_refsource_DEBIAN
30327
third-party-advisory
x_refsource_SECUNIA
238492
vendor-advisory
x_refsource_SUNALERT
USN-592-1
vendor-advisory
x_refsource_UBUNTU
29616
third-party-advisory
x_refsource_SECUNIA
29645
third-party-advisory
x_refsource_SECUNIA
ADV-2008-1793
vdb-entry
x_refsource_VUPEN
29558
third-party-advisory
x_refsource_SECUNIA
29526
third-party-advisory
x_refsource_SECUNIA
SUSE-SA:2008:019
vendor-advisory
x_refsource_SUSE
TA08-087A
third-party-advisory
x_refsource_CERT
28448
vdb-entry
x_refsource_BID
DSA-1534
vendor-advisory
x_refsource_DEBIAN
29547
third-party-advisory
x_refsource_SECUNIA
GLSA-200805-18
vendor-advisory
x_refsource_GENTOO
ADV-2008-0998
vdb-entry
x_refsource_VUPEN
DSA-1535
vendor-advisory
x_refsource_DEBIAN
MDVSA-2008:080
vendor-advisory
x_refsource_MANDRIVA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now