cve/2008/CVE-2008-5503.md
2024-06-18 02:51:15 +02:00

778 B

CVE-2008-5503

Description

The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.

POC

Reference

Github

No PoCs found on GitHub currently.