Chain
CVE-2008-2810 family: incomplete fixes (2008–2009)
3 CVEs over 3 generations, 7 Jul 2008 to 4 Feb 2009.
Family tree
Left to right by publication date.Oldest first. Select a CVE to open it.- CVE-2008-28107 Jul 2008 First in the chain
- CVE-2008-458215 Oct 2008 variant of CVE-2008-2810
- CVE-2009-03564 Feb 2009 incomplete fix for CVE-2008-4582
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
CVEs in this family
Table view of the tree| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2008-2810 | 7 Jul 2008 | Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut… | First in chain | 13.1 |
| CVE-2008-4582 | 15 Oct 2008 | Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on… | CVE-2008-2810 · variant in the same code · High | 24.1 |
| CVE-2009-0356 | 4 Feb 2009 | Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from… | CVE-2008-4582 · incomplete fix · High | 17.6 |