Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
Metrics
CVSS 2.0 6.8/10
AV:N/AC:M/Au:N/C:P/I:P/A:PWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/33184Third Party Advisory
- http://secunia.com/advisories/33188Third Party Advisory
- http://secunia.com/advisories/33189Third Party Advisory
- http://secunia.com/advisories/33203Third Party Advisory
- http://secunia.com/advisories/33204Third Party Advisory
- http://secunia.com/advisories/33205Third Party Advisory
- http://secunia.com/advisories/33216Third Party Advisory
- http://secunia.com/advisories/33231Third Party Advisory
- http://secunia.com/advisories/33232Third Party Advisory
- http://secunia.com/advisories/33408Third Party Advisory
- http://secunia.com/advisories/33415Third Party Advisory
- http://secunia.com/advisories/33421Third Party Advisory
- http://secunia.com/advisories/33433Third Party Advisory
- http://secunia.com/advisories/33434Third Party Advisory
- http://secunia.com/advisories/33523Third Party Advisory
- http://secunia.com/advisories/33547Third Party Advisory
- http://secunia.com/advisories/34501Third Party Advisory
- http://secunia.com/advisories/35080Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1Broken Link
- http://www.debian.org/security/2009/dsa-1696Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-64.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.htmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.htmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.htmlThird Party Advisory
- http://www.securityfocus.com/bid/32882Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021427Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-2Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=458248Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47412Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10512Third Party Advisory
- https://usn.ubuntu.com/690-1/Third Party Advisory
- https://usn.ubuntu.com/690-3/Third Party Advisory
- http://secunia.com/advisories/33184Third Party Advisory
- http://secunia.com/advisories/33188Third Party Advisory
- http://secunia.com/advisories/33189Third Party Advisory
- http://secunia.com/advisories/33203Third Party Advisory
- http://secunia.com/advisories/33204Third Party Advisory
- http://secunia.com/advisories/33205Third Party Advisory
- http://secunia.com/advisories/33216Third Party Advisory
- http://secunia.com/advisories/33231Third Party Advisory
- http://secunia.com/advisories/33232Third Party Advisory
- http://secunia.com/advisories/33408Third Party Advisory
- http://secunia.com/advisories/33415Third Party Advisory
- http://secunia.com/advisories/33421Third Party Advisory
- http://secunia.com/advisories/33433Third Party Advisory
- http://secunia.com/advisories/33434Third Party Advisory
- http://secunia.com/advisories/33523Third Party Advisory
- http://secunia.com/advisories/33547Third Party Advisory
- http://secunia.com/advisories/34501Third Party Advisory
- http://secunia.com/advisories/35080Third Party Advisory
Timeline
- Published
- Dec 17, 2008
- Last modified
- Jun 16, 2026
- NVD status
- Modified