CVE catalog

CVE-2008-0593

iceweasel - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.04% · Oct 25, 2026

Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel4.02.0.0.10-0etch1vulnerable
Debianiceweasel4.02.0.0.10-1vulnerable
Debianiceweasel4.02.0.0.10-2vulnerable
Debianiceweasel4.02.0.0.11-1vulnerable
Debianiceweasel4.02.0.0.3-1vulnerable
Debianiceweasel4.02.0.0.3-2vulnerable
Debianiceweasel4.02.0.0.4-0etch1vulnerable
Debianiceweasel4.02.0.0.4-1vulnerable
Debianiceweasel4.02.0.0.5-0etch1vulnerable
Debianiceweasel4.02.0.0.5-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.5-1vulnerable
Debianiceweasel4.02.0.0.5-2vulnerable
Debianiceweasel4.02.0.0.6+2.0.0.8-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.6-1vulnerable
Debianiceweasel4.02.0.0.7-1vulnerable
Debianiceweasel4.02.0.0.7-2vulnerable
Debianiceweasel4.02.0.0.8-1vulnerable
Debianiceweasel4.02.0.0.9-1vulnerable
Debianiceweasel4.02.0.0.9-2vulnerable
Debianiceweasel4.02.0.0.12-0etch1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb4.02.0.0.12-0etch1Not reportedDSA-1489-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]