CVE-2008-5511

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."

References

http://www.securityfocus.com/bid/32882

https://bugzilla.mozilla.org/show_bug.cgi?id=451680

http://secunia.com/advisories/33408

http://www.debian.org/security/2009/dsa-1697

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11881

https://usn.ubuntu.com/690-3/

http://secunia.com/advisories/33205

http://www.securitytracker.com/id?1021418

http://secunia.com/advisories/33421

http://secunia.com/advisories/33232

http://www.redhat.com/support/errata/RHSA-2008-1036.html

http://www.mozilla.org/security/announce/2008/mfsa2008-68.html

http://www.vupen.com/english/advisories/2009/0977

http://www.ubuntu.com/usn/usn-690-2

http://www.ubuntu.com/usn/usn-701-1

http://secunia.com/advisories/33231

http://www.mandriva.com/security/advisories?name=MDVSA-2008:245

https://usn.ubuntu.com/690-1/

http://www.mandriva.com/security/advisories?name=MDVSA-2009:012

http://secunia.com/advisories/33203

http://secunia.com/advisories/33433

http://www.debian.org/security/2009/dsa-1707

http://secunia.com/advisories/33216

http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1

http://www.redhat.com/support/errata/RHSA-2008-1037.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/47417

http://www.debian.org/security/2009/dsa-1704

http://www.debian.org/security/2009/dsa-1696

http://secunia.com/advisories/33204

http://www.ubuntu.com/usn/usn-701-2

http://secunia.com/advisories/33184

http://www.redhat.com/support/errata/RHSA-2009-0002.html

http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1

http://www.mandriva.com/security/advisories?name=MDVSA-2008:244

https://bugzilla.mozilla.org/show_bug.cgi?id=464174

http://secunia.com/advisories/33415

http://secunia.com/advisories/33188

http://secunia.com/advisories/33523

http://secunia.com/advisories/35080

http://secunia.com/advisories/33547

http://secunia.com/advisories/33434

http://secunia.com/advisories/33189

http://secunia.com/advisories/34501