CVE-2008-2810
Detail
Deferred
This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
Description
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
Vector:
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected] .
URL
Source(s)
Tag(s)
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html
CVE, Inc., Red Hat
http://rhn.redhat.com/errata/RHSA-2008-0616.html
CVE, Inc., Red Hat
http://secunia.com/advisories/30878
CVE, Inc., Red Hat
http://secunia.com/advisories/30898
CVE, Inc., Red Hat
http://secunia.com/advisories/30903
CVE, Inc., Red Hat
http://secunia.com/advisories/30911
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/30949
CVE, Inc., Red Hat
http://secunia.com/advisories/31005
CVE, Inc., Red Hat
http://secunia.com/advisories/31008
CVE, Inc., Red Hat
http://secunia.com/advisories/31021
CVE, Inc., Red Hat
http://secunia.com/advisories/31023
CVE, Inc., Red Hat
http://secunia.com/advisories/31076
CVE, Inc., Red Hat
http://secunia.com/advisories/31195
CVE, Inc., Red Hat
http://secunia.com/advisories/31377
CVE, Inc., Red Hat
http://secunia.com/advisories/33433
CVE, Inc., Red Hat
http://security.gentoo.org/glsa/glsa-200808-03.xml
CVE, Inc., Red Hat
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152
CVE, Inc., Red Hat
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911
CVE, Inc., Red Hat
http://wiki.rpath.com/Advisories:rPSA-2008-0216
CVE, Inc., Red Hat
http://www.debian.org/security/2009/dsa-1697
CVE, Inc., Red Hat
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15
CVE, Inc., Red Hat
http://www.mozilla.org/security/announce/2008/mfsa2008-32.html
CVE, Inc., Red Hat
http://www.redhat.com/support/errata/RHSA-2008-0547.html
CVE, Inc., Red Hat
http://www.redhat.com/support/errata/RHSA-2008-0549.html
CVE, Inc., Red Hat
http://www.redhat.com/support/errata/RHSA-2008-0569.html
CVE, Inc., Red Hat
http://www.securityfocus.com/archive/1/494080/100/0/threaded
CVE, Inc., Red Hat
http://www.securityfocus.com/bid/30038
CVE, Inc., Red Hat
http://www.securitytracker.com/id?1020419
CVE, Inc., Red Hat
http://www.ubuntu.com/usn/usn-619-1
CVE, Inc., Red Hat
http://www.vupen.com/english/advisories/2008/1993/references
CVE, Inc., Red Hat
https://bugzilla.mozilla.org/show_bug.cgi?id=410156
CVE, Inc., Red Hat
https://issues.rpath.com/browse/RPL-2646
CVE, Inc., Red Hat
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9593
CVE, Inc., Red Hat
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html
CVE, Inc., Red Hat
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html
CVE, Inc., Red Hat
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html
CVE, Inc., Red Hat
Weakness Enumeration
CWE-ID
CWE Name
Source
CWE-264
Permissions, Privileges, and Access Controls
NIST
Change History
5 change records found show changes
CVE Modified by CVE 11/20/2024 7:47:45 PM
Action
Type
Old Value
New Value
Added
Reference
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html
Added
Reference
http://rhn.redhat.com/errata/RHSA-2008-0616.html
Added
Reference
http://secunia.com/advisories/30878
Added
Reference
http://secunia.com/advisories/30898
Added
Reference
http://secunia.com/advisories/30903
Added
Reference
http://secunia.com/advisories/30911
Added
Reference
http://secunia.com/advisories/30949
Added
Reference
http://secunia.com/advisories/31005
Added
Reference
http://secunia.com/advisories/31008
Added
Reference
http://secunia.com/advisories/31021
Added
Reference
http://secunia.com/advisories/31023
Added
Reference
http://secunia.com/advisories/31076
Added
Reference
http://secunia.com/advisories/31195
Added
Reference
http://secunia.com/advisories/31377
Added
Reference
http://secunia.com/advisories/33433
Added
Reference
http://security.gentoo.org/glsa/glsa-200808-03.xml
Added
Reference
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152
Added
Reference
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911
Added
Reference
http://wiki.rpath.com/Advisories:rPSA-2008-0216
Added
Reference
http://www.debian.org/security/2009/dsa-1697
Added
Reference
http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15
Added
Reference
http://www.mozilla.org/security/announce/2008/mfsa2008-32.html
Added
Reference
http://www.redhat.com/support/errata/RHSA-2008-0547.html
Added
Reference
http://www.redhat.com/support/errata/RHSA-2008-0549.html
Added
Reference
http://www.redhat.com/support/errata/RHSA-2008-0569.html
Added
Reference
http://www.securityfocus.com/archive/1/494080/100/0/threaded
Added
Reference
http://www.securityfocus.com/bid/30038
Added
Reference
http://www.securitytracker.com/id?1020419
Added
Reference
http://www.ubuntu.com/usn/usn-619-1
Added
Reference
http://www.vupen.com/english/advisories/2008/1993/references
Added
Reference
https://bugzilla.mozilla.org/show_bug.cgi?id=410156
Added
Reference
https://issues.rpath.com/browse/RPL-2646
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9593
Added
Reference
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html
Added
Reference
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html
Added
Reference
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html
CVE Modified by Red Hat, Inc. 5/13/2024 9:54:02 PM
Action
Type
Old Value
New Value
CVE Modified by Red Hat, Inc. 10/11/2018 4:44:32 PM
Action
Type
Old Value
New Value
Added
Reference
http://www.securityfocus.com/archive/1/494080/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/494080/100/0/threaded [No Types Assigned]
CVE Modified by Red Hat, Inc. 9/28/2017 9:31:20 PM
Action
Type
Old Value
New Value
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9593 [No Types Assigned]
Removed
Reference
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9593 [No Types Assigned]
Initial CVE Analysis 7/08/2008 2:10:00 PM
Action
Type
Old Value
New Value
Quick Info
CVE Dictionary Entry: CVE-2008-2810 NVD
Published Date: 07/07/2008 NVD
Last Modified: 04/08/2025
Source: Red Hat, Inc.