Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2490?format=api",
    "vulnerability_id": "VCID-tp6x-cmys-b7e4",
    "summary": "Mozilla developer Paul Nickerson reported a variant of a click-hijacking vulnerability discovered in Internet Explorer by Liu Die Yu.  The vulnerability allowed an attacker to move the content window while the mouse was being clicked, causing an item to be dragged rather than clicked-on.  This issue could potentially be used to force a user to download a file or perform other drag-and-drop actions.",
    "aliases": [
        {
            "alias": "CVE-2008-3837"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1097?format=api",
            "purl": "pkg:mozilla/Firefox@3.0.2",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1096?format=api",
            "purl": "pkg:mozilla/SeaMonkey@1.1.12",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@1.1.12"
        }
    ],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3837",
            "reference_id": "CVE-2008-3837",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3837"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2008-40",
            "reference_id": "mfsa2008-40",
            "reference_type": "",
            "scores": [
                {
                    "value": "low",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2008-40"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "0.1 - 3",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tp6x-cmys-b7e4"
}