CVE-2008-1241 Other in n/a

Medium 4.3 Published Updated

Remote attackers can spoof form elements and redirect user inputs via borderless XUL pop-up windows in Firefox and SeaMonkey browsers.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
Available

What is CVE-2008-1241?

CVE-2008-1241 is a medium-severity vulnerability in Mozilla Firefox, published on 27 Mar 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.

Weakness: CWE-59

Which versions are affected by CVE-2008-1241?

It affects 2 products.

Products include Mozilla Firefox, Mozilla Seamonkey.

How do I fix CVE-2008-1241?

Upgrade to a fixed version.

Is CVE-2008-1241 being exploited?

There is no known exploitation of CVE-2008-1241 in the wild and no public exploit code.

All Mozilla Firefox vulnerabilities

Sources

Also known as GHSA-wwx7-qx3f-7g4r.

Is CVE-2008-1241 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free