CVE:CVE-2008-2808
CNNVD:CNNVD-200807-107
Firefox是Mozilla所发布的开源WEB浏览器。
处理本地目录列表中所包含的文件URL方式中的漏洞可能导致执行恶意JavaScript内容。
solution:Upgrade mozilla firefox to a higher version than 2.0,2.0:beta_1,2.0:rc2,2.0:rc3,2.0.0.2,2.0.0.3,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0_.1,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.10,2.0_8,and avoid the version 2.0,2.0:beta_1,2.0:rc2,2.0:rc3,2.0.0.2,2.0.0.3,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0_.1,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.10,2.0_8; Upgrade mozilla seamonkey to a higher version than 1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,and avoid the version 1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9; Upgrade mozilla thunderbird to a higher version than 2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8,and avoid the version 2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8