Description
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect.
References
- SUSE-SA:2008:034 vendor-advisory
- 31021 third-party-advisory
- 30898 third-party-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0216
- https://issues.rpath.com/browse/RPL-2646
- SSA:2008-191-03 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=408329
- 31008 third-party-advisory
- ADV-2008-1993 vdb-entry
- 31023 third-party-advisory
- 30038 vdb-entry
- 31005 third-party-advisory
- 1020419 vdb-entry
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15
- FEDORA-2008-6193 vendor-advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-28.html
- SSA:2008-191 vendor-advisory
- 31076 third-party-advisory
- USN-619-1 vendor-advisory
- 30911 third-party-advisory
- 20080708 rPSA-2008-0216-1 firefox mailing-list
- FEDORA-2008-6196 vendor-advisory