CVE:CVE-2008-0418
CNNVD:CNNVD-200802-136
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
FMozilla Firefox浏览器引擎 2.0.0.12之前版本，Thunderbird  2.0.0.12之前版本，SeaMonkey 1.1.8 之前版本，当使用"flat"插件时，允许远程攻击者通过
chrome: URI scheme
读取arbitrary Javascript，图像，样式表文件，URI方案，如从sessionstore.js文件中盗取会话信息。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.11,and avoid the version (,2.0.0.11]; Upgrade mozilla seamonkey to a higher version than 1.1.7,and avoid the version (,1.1.7]; Upgrade mozilla thunderbird to a higher version than 2.0.0.11,and avoid the version (,2.0.0.11]