CVE-2008-5503

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 2.0.0 through 2.0.18 Thunderbird versions 2.0.0 through 2.0.18 SeaMonkey versions 1.0 through 1.1.13

Description The issue is related to the loadBindingDocument function, which does not enforce the same-domain policy, allowing remote attackers to access data from other domains using crafted XBL bindings.

Recommendations For Mozilla Firefox versions 2.0.0 through 2.0.18, update to version 2.0.0.19 or later. For Thunderbird versions 2.0.0 through 2.0.18, update to version 2.0.0.19 or later. For SeaMonkey versions 1.0 through 1.1.13, update to version 1.1.14 or later.