Description The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration CWE-ID CWE Name Source CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') [email protected]
Affected Products Product Versions mozilla seamonkey <= 2.0.6
1.0
1.0 alpha
1.0 beta
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1
1.1 alpha
1.1 beta
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.5.0.8
1.5.0.9
1.5.0.10
2.0
2.0 alpha_1
2.0 alpha_2
2.0 alpha_3
2.0 beta_1
2.0 beta_2
2.0 rc1
2.0 rc2
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0a1pre
Viewing 5 of 52 versions. View all CPE cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:* Remediation No remediation found in references. mozilla thunderbird <= 3.0.6
0.1
0.2
0.3
0.4
0.5
0.6
0.7
0.7.1
0.7.2
0.7.3
0.8
0.9
1.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.5
1.5 beta2
1.5.0.1
1.5.0.2
1.5.0.3
1.5.0.4
1.5.0.5
1.5.0.6
1.5.0.7
1.5.0.8
1.5.0.9
1.5.0.10
1.5.0.11
1.5.0.12
1.5.0.13
1.5.0.14
1.5.1
1.5.2
2.0
2.0.0.0
2.0.0.1
2.0.0.2
2.0.0.3
2.0.0.4
2.0.0.5
2.0.0.6
2.0.0.7
2.0.0.8
2.0.0.9
2.0.0.12
2.0.0.14
2.0.0.16
2.0.0.17
2.0.0.18
2.0.0.19
2.0.0.21
2.0.0.22
2.0.0.23
3.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
Viewing 5 of 66 versions. View all CPE cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:3.0.5:*:*:*:*:*:*:* Remediation No remediation found in references. mozilla firefox <= 3.5.11
1.0
1.0 preview_release
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.5
1.5 beta1
1.5 beta2
1.5.0.1
1.5.0.2
1.5.0.3
1.5.0.4
1.5.0.5
1.5.0.6
1.5.0.7
1.5.0.8
1.5.0.9
1.5.0.10
1.5.0.11
1.5.0.12
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
2.0
2.0.0.1
2.0.0.2
2.0.0.3
2.0.0.4
2.0.0.5
2.0.0.6
2.0.0.7
2.0.0.8
2.0.0.9
2.0.0.10
2.0.0.11
2.0.0.12
2.0.0.13
2.0.0.14
2.0.0.15
2.0.0.16
2.0.0.17
2.0.0.18
2.0.0.19
2.0.0.20
3.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.0.9
3.0.10
3.0.11
3.0.12
3.0.13
3.0.14
3.0.15
3.0.16
3.0.17
3.5
3.5.1
3.5.2
3.5.3
3.5.4
3.5.5
3.5.6
3.5.7
3.5.8
3.5.9
3.5.10
Viewing 5 of 84 versions. View all CPE cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:3.5.10:*:*:*:*:*:*:* Remediation No remediation found in references.
Change History 7 change records found show changes