CVE-2008-5504

HIGH 7.5CVE-2008-5504 · Published 17/12/2008 · updated 16/06/2026

In short

CVE-2008-5504 is a HIGH (CVSS 7.5) vulnerability affecting firefox (mozilla).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
firefox mozilla	`= 2.0= 2.0.0.1= 2.0.0.10= 2.0.0.11= 2.0.0.12= 2.0.0.13= 2.0.0.14= 2.0.0.15= 2.0.0.16= 2.0.0.17= 2.0.0.2= 2.0.0.3= 2.0.0.4= 2.0.0.5= 2.0.0.6= 2.0.0.7= 2.0.0.8= 2.0.0.9≤ 2.0.0.18`	No fix yet

Description

Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.

References

secunia.com/advisories/33184
secunia.com/advisories/33189
secunia.com/advisories/33231
secunia.com/advisories/33523
secunia.com/advisories/34501
sunsolve.sun.com/search/document.do
debian.org/security/2009/dsa-1707
mandriva.com/security/advisories
mozilla.org/security/announce/2008/mfsa2008-62.html · Vendor Advisory
redhat.com/support/errata/RHSA-2008-1037.html
securityfocus.com/bid/32882
securitytracker.com/id
ubuntu.com/usn/usn-690-2
vupen.com/english/advisories/2009/0977
bugzilla.mozilla.org/show_bug.cgi

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free