← Database

CVE-2008-5504

HIGH CVSS: 7.5 Published: 2008-12-17 Modified: 2026-06-16

Description

Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-264

References