CVE:CVE-2008-5023
CNNVD:CNNVD-200811-206
Mozilla的多个产品的JAR文件存在权限许可和访问控制漏洞。远程攻击者可以借助结合-moz-绑定CSS的签名JAR文件，绕过基本代码库主体保护机制执行任意脚本。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.18,3.0.4,and avoid the version [2.0,2.0.0.18),[3.0,3.0.4); Upgrade mozilla seamonkey to a higher version than 1.1.13,and avoid the version [1.0,1.1.13); Upgrade debian debian_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,7.10,8.04,8.10,and avoid the version 6.06,7.10,8.04,8.10