← Database

CVE-2008-2806

HIGH CVSS: 7.5 Published: 2008-07-07 Modified: 2026-06-16

Description

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect.

Affected Platforms

Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird

Weakness Type

CWE-20, NVD-CWE-noinfo

References