AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-2801

HIGH · CVSS 7.5 EPSS 2.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-07-07 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Firefox, Java. It may be remotely exploitable.

CVE
CVE-2008-2801
Severity
HIGH
CVSS
7.5
EPSS
2.81%
Firefox Java

Original NVD Description

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files.