CVE-2008-5503 (retired)

Priority
Description
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19,
Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not
perform any security checks related to the same-domain policy, which allows
remote attackers to read or access data from other domains via crafted XBL
bindings.
Package
Upstream:needs-triage
Package
Upstream:released (3.0.5)
Package
Upstream:released (1.1.14)
Package
Upstream:needs-triage
Package
Upstream:released (1.1.14)
Package
Upstream:released (2.0.0.19)
Package
Upstream:released (1.9.0.5)
More Information

Updated: 2019-03-26 11:46:14 UTC (commit ccdecfcf0fead22bd291e5f4ea745a46872dcb15)