CVE ID:	CVE-2008-5503
Description:	The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.
Test IDs:	1.3.6.1.4.1.25623.1.0.63009   1.3.6.1.4.1.25623.1.0.63302   1.3.6.1.4.1.25623.1.0.63025   1.3.6.1.4.1.25623.1.0.63026   1.3.6.1.4.1.25623.1.0.63218   1.3.6.1.4.1.25623.1.0.63220   1.3.6.1.4.1.25623.1.0.63023
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5503 1021424 http://www.securitytracker.com/id?1021424 256408 http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 258748 http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 32882 http://www.securityfocus.com/bid/32882 33184 http://secunia.com/advisories/33184 33189 http://secunia.com/advisories/33189 33204 http://secunia.com/advisories/33204 33205 http://secunia.com/advisories/33205 33231 http://secunia.com/advisories/33231 33232 http://secunia.com/advisories/33232 33408 http://secunia.com/advisories/33408 33415 http://secunia.com/advisories/33415 33421 http://secunia.com/advisories/33421 33433 http://secunia.com/advisories/33433 33434 http://secunia.com/advisories/33434 33523 http://secunia.com/advisories/33523 33547 http://secunia.com/advisories/33547 34501 http://secunia.com/advisories/34501 35080 http://secunia.com/advisories/35080 ADV-2009-0977 http://www.vupen.com/english/advisories/2009/0977 DSA-1696 http://www.debian.org/security/2009/dsa-1696 DSA-1697 http://www.debian.org/security/2009/dsa-1697 DSA-1704 http://www.debian.org/security/2009/dsa-1704 DSA-1707 http://www.debian.org/security/2009/dsa-1707 MDVSA-2008:244 http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 MDVSA-2009:012 http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 RHSA-2008:1037 http://www.redhat.com/support/errata/RHSA-2008-1037.html RHSA-2009:0002 http://www.redhat.com/support/errata/RHSA-2009-0002.html USN-690-2 http://www.ubuntu.com/usn/usn-690-2 USN-690-3 https://usn.ubuntu.com/690-3/ USN-701-1 http://www.ubuntu.com/usn/usn-701-1 USN-701-2 http://www.ubuntu.com/usn/usn-701-2 http://www.mozilla.org/security/announce/2008/mfsa2008-61.html http://www.mozilla.org/security/announce/2008/mfsa2008-61.html https://bugzilla.mozilla.org/show_bug.cgi?id=379959 https://bugzilla.mozilla.org/show_bug.cgi?id=379959 mozilla-xbl-information-disclosure(47409) https://exchange.xforce.ibmcloud.com/vulnerabilities/47409 oval:org.mitre.oval:def:11423 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11423