CVE-2008-5513

Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.

• CWE-79

• http://secunia.com/advisories/33184Third Party Advisory
• http://secunia.com/advisories/33188Third Party Advisory
• http://secunia.com/advisories/33189Third Party Advisory
• http://secunia.com/advisories/33203Third Party Advisory
• http://secunia.com/advisories/33216Third Party Advisory
• http://secunia.com/advisories/33231Third Party Advisory
• http://secunia.com/advisories/33421Third Party Advisory
• http://secunia.com/advisories/33523Third Party Advisory
• http://secunia.com/advisories/34501Third Party Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Broken Link
• http://www.debian.org/security/2009/dsa-1707Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:244Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:245Third Party Advisory
• http://www.mozilla.org/security/announce/2008/mfsa2008-69.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2008-1036.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-1037.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2009-0002.htmlThird Party Advisory
• http://www.securityfocus.com/bid/32882Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021421Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-690-2Third Party Advisory
• http://www.vupen.com/english/advisories/2009/0977Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47418Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10389Third Party Advisory
• https://usn.ubuntu.com/690-1/Third Party Advisory
• http://secunia.com/advisories/33184Third Party Advisory
• http://secunia.com/advisories/33188Third Party Advisory
• http://secunia.com/advisories/33189Third Party Advisory
• http://secunia.com/advisories/33203Third Party Advisory
• http://secunia.com/advisories/33216Third Party Advisory
• http://secunia.com/advisories/33231Third Party Advisory
• http://secunia.com/advisories/33421Third Party Advisory
• http://secunia.com/advisories/33523Third Party Advisory
• http://secunia.com/advisories/34501Third Party Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Broken Link
• http://www.debian.org/security/2009/dsa-1707Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:244Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:245Third Party Advisory
• http://www.mozilla.org/security/announce/2008/mfsa2008-69.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2008-1036.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-1037.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2009-0002.htmlThird Party Advisory
• http://www.securityfocus.com/bid/32882Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021421Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-690-2Third Party Advisory
• http://www.vupen.com/english/advisories/2009/0977Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47418Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10389Third Party Advisory
• https://usn.ubuntu.com/690-1/Third Party Advisory

Published

Dec 17, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5507Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Th…
• CVE-2008-5508Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Th…
• CVE-2008-5509Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-5510The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x b…
• CVE-2008-5511Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Th…
• CVE-2008-5512Multiple unspecified vulnerabilities in Mozilla Firefox 3.x …
• CVE-2008-5514Off-by-one error in the rfc822_output_char function in the R…
• CVE-2008-5515Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.…
• CVE-2008-5516The web interface in git (gitweb) 1.5.x before 1.5.5 allows …
• CVE-2008-5517The web interface in git (gitweb) 1.5.x before 1.5.6 allows …
• CVE-2008-5518Multiple directory traversal vulnerabilities in the web admi…
• CVE-2008-5519The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache…