Search for vulnerabilities
Vulnerability details: VCID-gg8m-7wa2-aaad
Vulnerability ID VCID-gg8m-7wa2-aaad
Aliases CVE-2008-5024
Summary CVE-2008-5024 Mozilla parsing error in E4X default namespace
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-91 XML Injection (aka Blind XPath Injection)
System Score Found at
rhas Moderate https://access.redhat.com/errata/RHSA-2008:0976
rhas Critical https://access.redhat.com/errata/RHSA-2008:0977
rhas Critical https://access.redhat.com/errata/RHSA-2008:0978
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.01483 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05012 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.05502 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.06070 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.06070 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.06070 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.06070 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
epss 0.10166 https://api.first.org/data/v1/epss?cve=CVE-2008-5024
rhbs low https://bugzilla.redhat.com/show_bug.cgi?id=470902
cvssv2 7.5 https://nvd.nist.gov/vuln/detail/CVE-2008-5024
generic_textual low https://www.mozilla.org/en-US/security/advisories/mfsa2008-58
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5024.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5024
https://bugzilla.mozilla.org/show_bug.cgi?id=453915
http://secunia.com/advisories/32684
http://secunia.com/advisories/32693
http://secunia.com/advisories/32694
http://secunia.com/advisories/32695
http://secunia.com/advisories/32713
http://secunia.com/advisories/32714
http://secunia.com/advisories/32715
http://secunia.com/advisories/32721
http://secunia.com/advisories/32778
http://secunia.com/advisories/32798
http://secunia.com/advisories/32845
http://secunia.com/advisories/32853
http://secunia.com/advisories/33433
http://secunia.com/advisories/33434
http://secunia.com/advisories/34501
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9063
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
http://ubuntu.com/usn/usn-667-1
http://www.debian.org/security/2008/dsa-1669
http://www.debian.org/security/2008/dsa-1671
http://www.debian.org/security/2009/dsa-1696
http://www.debian.org/security/2009/dsa-1697
http://www.mandriva.com/security/advisories?name=MDVSA-2008:228
http://www.mandriva.com/security/advisories?name=MDVSA-2008:230
http://www.mandriva.com/security/advisories?name=MDVSA-2008:235
http://www.mozilla.org/security/announce/2008/mfsa2008-58.html
http://www.redhat.com/support/errata/RHSA-2008-0976.html
http://www.redhat.com/support/errata/RHSA-2008-0977.html
http://www.redhat.com/support/errata/RHSA-2008-0978.html
http://www.securityfocus.com/bid/32281
http://www.securitytracker.com/id?1021192
http://www.us-cert.gov/cas/techalerts/TA08-319A.html
http://www.vupen.com/english/advisories/2008/3146
http://www.vupen.com/english/advisories/2009/0977
470902 https://bugzilla.redhat.com/show_bug.cgi?id=470902
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
CVE-2008-5024 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5024
CVE-2008-5024 https://nvd.nist.gov/vuln/detail/CVE-2008-5024
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2008-58 https://www.mozilla.org/en-US/security/advisories/mfsa2008-58
RHSA-2008:0976 https://access.redhat.com/errata/RHSA-2008:0976
RHSA-2008:0977 https://access.redhat.com/errata/RHSA-2008:0977
RHSA-2008:0978 https://access.redhat.com/errata/RHSA-2008:0978
USN-667-1 https://usn.ubuntu.com/667-1/
USN-668-1 https://usn.ubuntu.com/668-1/
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2008-5024
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.87203
EPSS Score 0.01483
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.