CVE-2008-3198

Publication date 17 July 2008

Last updated 24 July 2024


Ubuntu priority

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.

Status

Package Ubuntu Release Status
firefox-3.0 8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
7.10 gutsy Ignored end of life, was needed
7.04 feisty Not in release
6.06 LTS dapper Not in release