CVE-2008-1233

Upstream information

CVE-2008-1233 at MITRE

Description

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having critical severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

SUSE Bugzilla entry: 370353 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SA:2008:019, published Fri, 04 Apr 2008 14:00:00 +0000
• openSUSE-SU-2014:1100-1, published Tue, 9 Sep 2014 18:04:16 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
openSUSE Tumbleweed	MozillaThunderbird >= 91.1.1-1.1 MozillaThunderbird-translations-common >= 91.1.1-1.1 MozillaThunderbird-translations-other >= 91.1.1-1.1 seamonkey >= 2.53.9.1-1.1 seamonkey-dom-inspector >= 2.53.9.1-1.1 seamonkey-irc >= 2.53.9.1-1.1	Patchnames: openSUSE Tumbleweed GA MozillaThunderbird-91.1.1-1.1 openSUSE Tumbleweed GA seamonkey-2.53.9.1-1.1