Unrated severityNVD Advisory· Published Jul 17, 2008· Updated Jun 16, 2026
CVE-2008-3198
CVE-2008-3198
Description
Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<3.0.1+ 1 more
- (no CPE)range: <3.0.1
- cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.