CVE:CVE-2008-3835
CNNVD:CNNVD-200809-310
Firefox是Mozilla所发布的开源WEB浏览器。
Mozilla Firefox版本2.0.0.17和Thunderbird 2.0.0.17之前的浏览器的函数 nsXMLDocument::OnChannelRedirect()在实现同源检查时存在错误，导致以不同站点的环境执行任意脚本代码。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.16,0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.9_rc,0.10,0.10.1,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.5,1.5:beta1,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.8,2.0,2.0.0.1,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,and avoid the version (,2.0.0.16],0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.9_rc,0.10,0.10.1,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.5,1.5:beta1,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.8,2.0,2.0.0.1,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15; Upgrade mozilla seamonkey to a higher version than *,1.1.11,1.0,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.99,1.1,1.1.1,1.1.10,and avoid the version (,1.1.11],1.0,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.99,1.1,1.1.1,1.1.10; Upgrade mozilla thunderbird to a higher version than *,2.0.0.16,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.7.1,0.7.2,0.7.3,0.8,0.9,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.0.8,1.5,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.1,1.5.2,1.7.1,1.7.3,2.0.0.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.8,2.0.0.9,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8,and avoid the version (,2.0.0.16],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.7.1,0.7.2,0.7.3,0.8,0.9,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.0.8,1.5,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.1,1.5.2,1.7.1,1.7.3,2.0.0.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.8,2.0.0.9,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8