CVE-2008-5503

Priority
Description
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19,
Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not
perform any security checks related to the same-domain policy, which allows
remote attackers to read or access data from other domains via crafted XBL
bindings.
Package
Upstream:needs-triage
Package
Upstream:released (3.0.5)
Package
Upstream:released (1.1.14)
Package
Upstream:needs-triage
Package
Upstream:released (1.1.14)
Package
Upstream:released (2.0.0.19)
Package
Upstream:released (1.9.0.5)
More Information

Updated: 2019-03-19 11:48:10 UTC (commit 15472795df7e9de45b82f2d36b8b419b939f97b2)