CVE-2008-4065

中 4.3CVE-2008-4065 · 24/09/2008 公開 · 16/06/2026 更新

要点

CVE-2008-4065 は firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla) に影響する深刻度「中」 (CVSS 4.3) の脆弱性です。
今後30日間に悪用される確率（EPSS）：4.1%（全脆弱性の 90.8% より高い）。
対処：3.0.2, 2.0.0.17, 1.1.12 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
firefox mozilla	`≥ 3.0, < 3.0.2< 2.0.0.17`	`3.0.22.0.0.17`
seamonkey mozilla	`< 1.1.12`	`1.1.12`
thunderbird mozilla	`< 2.0.0.17`	`2.0.0.17`

概要

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka "Stripped BOM characters bug."

参考情報

download.novell.com/Download · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html · Third Party Advisory
secunia.com/advisories/31984 · Third Party Advisory
secunia.com/advisories/31985 · Third Party Advisory
secunia.com/advisories/31987 · Third Party Advisory
secunia.com/advisories/32007 · Third Party Advisory
secunia.com/advisories/32010 · Third Party Advisory
secunia.com/advisories/32011 · Third Party Advisory
secunia.com/advisories/32012 · Third Party Advisory
secunia.com/advisories/32025 · Third Party Advisory
secunia.com/advisories/32042 · Third Party Advisory
secunia.com/advisories/32044 · Third Party Advisory
secunia.com/advisories/32082 · Third Party Advisory
secunia.com/advisories/32089 · Third Party Advisory
secunia.com/advisories/32092 · Third Party Advisory
secunia.com/advisories/32095 · Third Party Advisory
secunia.com/advisories/32096 · Third Party Advisory
secunia.com/advisories/32144 · Third Party Advisory
secunia.com/advisories/32185 · Third Party Advisory
secunia.com/advisories/32196 · Third Party Advisory
secunia.com/advisories/32845 · Third Party Advisory
secunia.com/advisories/33433 · Third Party Advisory
secunia.com/advisories/33434 · Third Party Advisory
secunia.com/advisories/34501 · Third Party Advisory
slackware.com/security/viewer.php · Third Party Advisory
slackware.com/security/viewer.php · Third Party Advisory
slackware.com/security/viewer.php · Third Party Advisory
sunsolve.sun.com/search/document.do · Broken Link
debian.org/security/2008/dsa-1649 · Third Party Advisory
debian.org/security/2008/dsa-1669 · Third Party Advisory
debian.org/security/2009/dsa-1696 · Third Party Advisory
debian.org/security/2009/dsa-1697 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
mozilla.org/security/announce/2008/mfsa2008-43.html · Vendor Advisory
redhat.com/support/errata/RHSA-2008-0879.html · Third Party Advisory
redhat.com/support/errata/RHSA-2008-0882.html · Third Party Advisory
redhat.com/support/errata/RHSA-2008-0908.html · Third Party Advisory
securityfocus.com/bid/31346 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
ubuntu.com/usn/usn-645-1 · Third Party Advisory
ubuntu.com/usn/usn-645-2 · Third Party Advisory
ubuntu.com/usn/usn-647-1 · Third Party Advisory
vupen.com/english/advisories/2008/2661 · Third Party Advisory
vupen.com/english/advisories/2009/0977 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/45356 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11383 · Third Party Advisory
redhat.com/archives/fedora-package-announce/2008-September/msg01335.html · Third Party Advisory
redhat.com/archives/fedora-package-announce/2008-September/msg01384.html · Third Party Advisory
redhat.com/archives/fedora-package-announce/2008-September/msg01403.html · Third Party Advisory

firefox のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン