← Database

CVE-2008-5511

MEDIUM CVSS: 4.3 Published: 2008-12-17 Modified: 2026-06-16

Description

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."

Affected Platforms

Canonical Ubuntu LinuxMozilla FirefoxMozilla SeamonkeyDebian Debian LinuxMozilla Thunderbird

Weakness Type

CWE-79

References