CVE-2008-5503

Priority
Description
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19,
Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not
perform any security checks related to the same-domain policy, which allows
remote attackers to read or access data from other domains via crafted XBL
bindings.
Notes
Package
Upstream:needs-triage
Package
Upstream:released (3.0.5)
Package
Upstream:released (1.1.14)
Package
Upstream:needs-triage
Package
Upstream:released (1.1.14)
Package
Upstream:released (2.0.0.19)
Package
Upstream:released (1.9.0.5)
More Information

Updated: 2020-01-29 19:34:03 UTC (commit 768ceb2fdee6790d707d0f681e1b54916744af1e)