CVE-2008-0591

Publication date 9 February 2008

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".

Status

Package Ubuntu Release Status
firefox 8.10 intrepid Not in release
8.04 LTS hardy
Fixed in 2.0.0.12+2nobinonly+2-0ubuntu3
7.10 gutsy
Fixed in 2.0.0.12+2nobinonly+2-0ubuntu0.7.10
7.04 feisty
Fixed in 2.0.0.12+1nobinonly+2-0ubuntu0.7.4
6.10 edgy
Fixed in 2.0.0.12+0nobinonly+2-0ubuntu0.6.10
6.06 LTS dapper
Fixed in 1.5.dfsg+1.5.0.15~prepatch080202a-0ubuntu1
iceape 8.10 intrepid Not in release
8.04 LTS hardy Not in release
7.10 gutsy Ignored end of life, was needs-triage
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
icedove 8.10 intrepid Not in release
8.04 LTS hardy Not in release
7.10 gutsy Not in release
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
iceweasel 8.10 intrepid Not in release
8.04 LTS hardy Not in release
7.10 gutsy Not in release
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
mozilla-thunderbird 8.10 intrepid Not in release
8.04 LTS hardy Not in release
7.10 gutsy Not in release
7.04 feisty
Fixed in 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.7.04.0
6.10 edgy
Fixed in 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.6.10.0
6.06 LTS dapper
Fixed in 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.6.06.0
seamonkey 8.10 intrepid
Fixed in 1.1.9+nobinonly-0ubuntu1
8.04 LTS hardy
Fixed in 1.1.9+nobinonly-0ubuntu1
7.10 gutsy Not in release
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
thunderbird 8.10 intrepid
Fixed in 2.0.0.12+nobinonly-0ubuntu1
8.04 LTS hardy
Fixed in 2.0.0.12+nobinonly-0ubuntu1
7.10 gutsy
Fixed in 2.0.0.12+nobinonly-0ubuntu0.7.10.0
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
xulrunner 8.10 intrepid
Fixed in 1.8.1.13+nobinonly-0ubuntu1
8.04 LTS hardy
Fixed in 1.8.1.13+nobinonly-0ubuntu1
7.10 gutsy
Fixed in 1.8.1.18+nobinonly.b308.cvs20090331t155113-0ubuntu0.7.10.1
7.04 feisty Ignored end of life, was needs-triage
6.10 edgy Ignored end of life, was needs-triage
6.06 LTS dapper Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-582-1
    • Thunderbird vulnerabilities
    • 29 February 2008
    • USN-576-1
    • Firefox vulnerabilities
    • 8 February 2008

Other references

Access our resources on patching vulnerabilities