CVE:CVE-2008-5507
CNNVD:CNNVD-200812-361
Firefox是Mozilla所发布的开源WEB浏览器。
如果同域JavaScript URL重新定向到的非同域目标资源包含有不可解析为JavaScript的数据的话，则在试图以JavaScript加载数据时生成的句法错误可能通过window.onerror DOM API泄露一些文件。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.19,3.0.5,and avoid the version [2.0,2.0.0.19),[3.0,3.0.5); Upgrade mozilla seamonkey to a higher version than 1.1.14,and avoid the version [1.0,1.1.14); Upgrade mozilla thunderbird to a higher version than 2.0.0.19,and avoid the version [2.0,2.0.0.19); Upgrade canonical ubuntu_linux to a higher version than 6.06,7.10,8.04,8.10,and avoid the version 6.06,7.10,8.04,8.10; Upgrade debian debian_linux to a higher version than 4.0,5.0,and avoid the version 4.0,5.0