CVE-2008-1234
Published: 27 March 2008
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."
Priority
Status
Package | Release | Status |
---|---|---|
firefox Launchpad, Ubuntu, Debian |
dapper |
Released
(1.5.dfsg+1.5.0.15~prepatch080323a-0ubuntu1)
|
edgy |
Released
(2.0.0.13+0nobinonly-0ubuntu0.6.10)
|
|
feisty |
Released
(2.0.0.13+0nobinonly-0ubuntu0.7.4)
|
|
gutsy |
Released
(2.0.0.13+1nobinonly-0ubuntu0.7.10)
|
|
hardy |
Released
(2.0.0.13+1nobinonly-0ubuntu1)
|
|
intrepid |
Does not exist
|
|
upstream |
Released
(2.0.0.13)
|
|
iceape Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
edgy |
Does not exist
|
|
feisty |
Does not exist
|
|
gutsy |
Ignored
(end of life, was needed)
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
upstream |
Released
(1.1.9)
|
|
icedove Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
edgy |
Does not exist
|
|
feisty |
Does not exist
|
|
gutsy |
Does not exist
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
upstream |
Released
(2.0.0.13)
|
|
iceweasel Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
edgy |
Does not exist
|
|
feisty |
Does not exist
|
|
gutsy |
Does not exist
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
upstream |
Needs triage
|
|
mozilla-thunderbird Launchpad, Ubuntu, Debian |
dapper |
Released
(1.5.0.13+1.5.0.15~prepatch080417a-0ubuntu0.6.06.1)
|
edgy |
Ignored
(end of life, was needed)
|
|
feisty |
Released
(1.5.0.13+1.5.0.15~prepatch080417a-0ubuntu0.7.04.1)
|
|
gutsy |
Does not exist
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
upstream |
Needed
|
|
seamonkey Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
edgy |
Does not exist
|
|
feisty |
Does not exist
|
|
gutsy |
Does not exist
|
|
hardy |
Released
(1.1.9+nobinonly-0ubuntu1)
|
|
intrepid |
Released
(1.1.9+nobinonly-0ubuntu1)
|
|
upstream |
Released
(1.1.9)
|
|
thunderbird Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
edgy |
Does not exist
|
|
feisty |
Does not exist
|
|
gutsy |
Released
(2.0.0.14+nobinonly-0ubuntu0.7.10.0)
|
|
hardy |
Released
(2.0.0.14+nobinonly-0ubuntu0.8.04.1)
|
|
intrepid |
Released
(2.0.0.14+nobinonly-0ubuntu2)
|
|
upstream |
Released
(2.0.0.13)
|
|
xulrunner Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
edgy |
Ignored
(end of life, was needed)
|
|
feisty |
Ignored
(end of life, was needed)
|
|
gutsy |
Released
(1.8.1.18+nobinonly.b308.cvs20090331t155113-0ubuntu0.7.10.1)
|
|
hardy |
Released
(1.8.1.13+nobinonly-0ubuntu1)
|
|
intrepid |
Released
(1.8.1.13+nobinonly-0ubuntu1)
|
|
upstream |
Needs triage
|