CVE ID:	CVE-2008-5507
Description:	Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.
Test IDs:	1.3.6.1.4.1.25623.1.0.63009   1.3.6.1.4.1.25623.1.0.63011   1.3.6.1.4.1.25623.1.0.63302   1.3.6.1.4.1.25623.1.0.63025   1.3.6.1.4.1.25623.1.0.63026   1.3.6.1.4.1.25623.1.0.63218   1.3.6.1.4.1.25623.1.0.63019   1.3.6.1.4.1.25623.1.0.63220   1.3.6.1.4.1.25623.1.0.63023
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5507 1021423 http://www.securitytracker.com/id?1021423 20081218 Firefox cross-domain text theft (CESA-2008-011) http://www.securityfocus.com/archive/1/499353/100/0/threaded 256408 http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 258748 http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 32882 http://www.securityfocus.com/bid/32882 33184 http://secunia.com/advisories/33184 33188 http://secunia.com/advisories/33188 33189 http://secunia.com/advisories/33189 33203 http://secunia.com/advisories/33203 33204 http://secunia.com/advisories/33204 33205 http://secunia.com/advisories/33205 33216 http://secunia.com/advisories/33216 33231 http://secunia.com/advisories/33231 33232 http://secunia.com/advisories/33232 33408 http://secunia.com/advisories/33408 33415 http://secunia.com/advisories/33415 33421 http://secunia.com/advisories/33421 33433 http://secunia.com/advisories/33433 33434 http://secunia.com/advisories/33434 33523 http://secunia.com/advisories/33523 33547 http://secunia.com/advisories/33547 34501 http://secunia.com/advisories/34501 35080 http://secunia.com/advisories/35080 ADV-2009-0977 http://www.vupen.com/english/advisories/2009/0977 DSA-1696 http://www.debian.org/security/2009/dsa-1696 DSA-1697 http://www.debian.org/security/2009/dsa-1697 DSA-1704 http://www.debian.org/security/2009/dsa-1704 DSA-1707 http://www.debian.org/security/2009/dsa-1707 MDVSA-2008:244 http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 MDVSA-2008:245 http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 MDVSA-2009:012 http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 RHSA-2008:1036 http://www.redhat.com/support/errata/RHSA-2008-1036.html RHSA-2008:1037 http://www.redhat.com/support/errata/RHSA-2008-1037.html RHSA-2009:0002 http://www.redhat.com/support/errata/RHSA-2009-0002.html USN-690-1 https://usn.ubuntu.com/690-1/ USN-690-2 http://www.ubuntu.com/usn/usn-690-2 USN-690-3 https://usn.ubuntu.com/690-3/ USN-701-1 http://www.ubuntu.com/usn/usn-701-1 USN-701-2 http://www.ubuntu.com/usn/usn-701-2 http://scary.beasts.org/security/CESA-2008-011.html http://scary.beasts.org/security/CESA-2008-011.html http://www.mozilla.org/security/announce/2008/mfsa2008-65.html http://www.mozilla.org/security/announce/2008/mfsa2008-65.html https://bugzilla.mozilla.org/show_bug.cgi?id=461735 https://bugzilla.mozilla.org/show_bug.cgi?id=461735 mozilla-javascripturl-infor-disclosure(47413) https://exchange.xforce.ibmcloud.com/vulnerabilities/47413 oval:org.mitre.oval:def:9376 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376