Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 6.0 | MEDIUM | AV:N/AC:M/Au:S/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://scary.beasts.org/security/CESA-2008-011.html | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33184 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33188 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33189 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33203 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33204 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33205 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33216 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33231 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33232 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33408 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33415 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33421 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33433 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33434 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33523 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/33547 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/34501 | secalert@redhat.com | Third Party Advisory |
| http://secunia.com/advisories/35080 | secalert@redhat.com | Third Party Advisory |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 | secalert@redhat.com | Broken Link |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 | secalert@redhat.com | Broken Link |
| http://www.debian.org/security/2009/dsa-1696 | secalert@redhat.com | Third Party Advisory |
| http://www.debian.org/security/2009/dsa-1697 | secalert@redhat.com | Third Party Advisory |
| http://www.debian.org/security/2009/dsa-1704 | secalert@redhat.com | Third Party Advisory |
| http://www.debian.org/security/2009/dsa-1707 | secalert@redhat.com | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 | secalert@redhat.com | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 | secalert@redhat.com | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 | secalert@redhat.com | Third Party Advisory |
| http://www.mozilla.org/security/announce/2008/mfsa2008-65.html | secalert@redhat.com | Vendor Advisory |
| http://www.redhat.com/support/errata/RHSA-2008-1036.html | secalert@redhat.com | Third Party Advisory |
| http://www.redhat.com/support/errata/RHSA-2008-1037.html | secalert@redhat.com | Third Party Advisory |
| http://www.redhat.com/support/errata/RHSA-2009-0002.html | secalert@redhat.com | Third Party Advisory |
| http://www.securityfocus.com/archive/1/499353/100/0/threaded | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/32882 | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id?1021423 | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://www.ubuntu.com/usn/usn-690-2 | secalert@redhat.com | Third Party Advisory |
| http://www.ubuntu.com/usn/usn-701-1 | secalert@redhat.com | Third Party Advisory |
| http://www.ubuntu.com/usn/usn-701-2 | secalert@redhat.com | Third Party Advisory |
| http://www.vupen.com/english/advisories/2009/0977 | secalert@redhat.com | Third Party Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=461735 | secalert@redhat.com | Issue Tracking Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/47413 | secalert@redhat.com | Third Party Advisory VDB Entry |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376 | secalert@redhat.com | Third Party Advisory |
| https://usn.ubuntu.com/690-1/ | secalert@redhat.com | Third Party Advisory |
| https://usn.ubuntu.com/690-3/ | secalert@redhat.com | Third Party Advisory |
| http://scary.beasts.org/security/CESA-2008-011.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33184 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33188 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33189 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33203 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33204 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33205 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33216 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33231 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33232 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33408 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33415 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33421 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33433 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33434 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33523 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/33547 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/34501 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/35080 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://www.debian.org/security/2009/dsa-1696 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.debian.org/security/2009/dsa-1697 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.debian.org/security/2009/dsa-1704 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.debian.org/security/2009/dsa-1707 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.mozilla.org/security/announce/2008/mfsa2008-65.html | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| http://www.redhat.com/support/errata/RHSA-2008-1036.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.redhat.com/support/errata/RHSA-2008-1037.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.redhat.com/support/errata/RHSA-2009-0002.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.securityfocus.com/archive/1/499353/100/0/threaded | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/32882 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id?1021423 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.ubuntu.com/usn/usn-690-2 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.ubuntu.com/usn/usn-701-1 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.ubuntu.com/usn/usn-701-2 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.vupen.com/english/advisories/2009/0977 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=461735 | af854a3a-2127-422b-91ae-364da2661108 | Issue Tracking Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/47413 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| https://usn.ubuntu.com/690-1/ | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| https://usn.ubuntu.com/690-3/ | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |