CVE:CVE-2008-2806
CNNVD:CNNVD-200807-105
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozillla Firefox Java Liveconnection 存在输入验证漏洞，Java LiveConnect在Mac OS X平台上实现中的漏洞可能导致创建任意套接字连接。
solution:Upgrade mozilla firefox to a higher version than 2.0,2.0:beta_1,2.0:rc2,2.0:rc3,2.0.0.2,2.0.0.3,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0_.1,2.0_.4,2.0_.5,2.0_.6,2.0_.7,2.0_.9,2.0_.10,2.0_8,and avoid the version 2.0,2.0:beta_1,2.0:rc2,2.0:rc3,2.0.0.2,2.0.0.3,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0_.1,2.0_.4,2.0_.5,2.0_.6,2.0_.7,2.0_.9,2.0_.10,2.0_8; Upgrade mozilla seamonkey to a higher version than 1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,and avoid the version 1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9; Upgrade mozilla thunderbird to a higher version than 2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8,and avoid the version 2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8