CVE-2008-2800
CVE-2008-2800
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors involving (1) an event handler attached to an outer window, (2) a SCRIPT element in an unloaded document, or (3) the onreadystatechange handler in conjunction with an XMLHttpRequest.
Productos afectados
n/a · n/a¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.htmlhttp://rhn.redhat.com/errata/RHSA-2008-0616.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=428672https://bugzilla.mozilla.org/show_bug.cgi?id=432591https://bugzilla.mozilla.org/show_bug.cgi?id=433328https://bugzilla.mozilla.org/show_bug.cgi?id=439035https://bugzilla.mozilla.org/show_bug.cgi?id=440308http://secunia.com/advisories/30878http://secunia.com/advisories/30898http://secunia.com/advisories/30903http://secunia.com/advisories/30911http://secunia.com/advisories/30949