Published: 24/09/2008 Updated: 29/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox prior to 2.0.0.17 and SeaMonkey prior to 1.1.12 allows remote malicious users to execute arbitrary code via a crafted UTF-8 URL in a link.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.9.1
mozilla firefox 0.9
mozilla firefox 1.0.3
mozilla firefox 1.0.2
mozilla firefox 1.5.0.5
mozilla firefox 1.5.0.2
mozilla firefox 1.5.0.6
mozilla firefox 1.5.7
mozilla firefox 1.5.0.9
mozilla firefox 1.5.0.7
mozilla firefox 2.0.0.10
mozilla firefox 2.0.0.13
mozilla seamonkey 1.0.8
mozilla seamonkey 1.0.7
mozilla seamonkey 1.0.9
mozilla seamonkey 1.0.99
mozilla seamonkey
mozilla firefox 0.9_rc
mozilla firefox 1.0.7
mozilla firefox 1.0.6
mozilla firefox 1.5.0.12
mozilla firefox 1.5.0.1
mozilla firefox 1.5.3
mozilla firefox 1.5.4
mozilla firefox 1.5.1
mozilla firefox 1.8
mozilla firefox 1.5.8
mozilla firefox 2.0.0.14
mozilla firefox 2.0.0.15
mozilla seamonkey 1.0.5
mozilla seamonkey 1.0.4
mozilla seamonkey 1.0
mozilla seamonkey 1.1
mozilla firefox 0.8
mozilla firefox 0.10.1
mozilla firefox 0.10
mozilla firefox 1.0.1
mozilla firefox 1.0
mozilla firefox 1.0.8
mozilla firefox 1.5.0.4
mozilla firefox 1.5.0.10
mozilla firefox 1.5
mozilla firefox 1.5.2
mozilla firefox 1.5.0.8
mozilla firefox 2.0.0.12
mozilla firefox
mozilla seamonkey 1.0.3
mozilla seamonkey 1.0.2
mozilla seamonkey 1.1.1
mozilla seamonkey 1.1.10
mozilla firefox 0.9.3
mozilla firefox 0.9.2
mozilla firefox 1.0.5
mozilla firefox 1.0.4
mozilla firefox 1.5.0.3
mozilla firefox 1.5.0.11
mozilla firefox 1.5.6
mozilla firefox 1.5.5
mozilla firefox 2.0
mozilla firefox 2.0.0.1
mozilla firefox 2.0.0.11
mozilla seamonkey 1.0.6
mozilla seamonkey 1.0.1

Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic Updated thunderbird packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having moderate security impact by the RedHat Security Response Tea ...

Synopsis Critical: seamonkey security update Type/Severity Security Advisory: Critical Topic Updated seamonkey packages that fix a security issues are now available forRed Hat Enterprise Linux 21, Red Hat Enterprise Linux 3 and Red HatEnterprise Linux 4This update has been rated as having critical securit ...

Justin Schuh, Tom Cross and Peter Williams discovered errors in the Firefox URL parsing routines If a user were tricked into opening a crafted hyperlink, an attacker could overflow a stack buffer and execute arbitrary code (CVE-2008-0016) ...

USN-645-1 fixed vulnerabilities in Firefox and xulrunner The upstream patches introduced a regression in the saved password handling While password data was not lost, if a user had saved any passwords with non-ASCII characters, Firefox could not access the password database This update fixes the problem ...

USN-645-1 fixed vulnerabilities in Firefox and xulrunner for Ubuntu 704, 710 and 804 LTS This provides the corresponding update for Ubuntu 606 LTS ...

Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0016 Justin Schuh, Tom Cross and Peter Williams discovered a buffer overflow in the parser for UTF-8 URLs, which may lead t ...

Several remote vulnerabilities have been discovered in Iceape an unbranded version of the Seamonkey internet suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0016 Justin Schuh, Tom Cross and Peter Williams discovered a buffer overflow in the parser for UTF-8 URLs, which may lead to the ex ...

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0016 Justin Schuh, Tom Cross and Peter Williams discovered a buffer overflow in the parser for UTF-8 URLs, which may lead to the executio ...

Mozilla Foundation Security Advisory 2008-37 UTF-8 URL stack buffer overflow Announced September 23, 2008 Reporter Justin Schuh, Tom Cross, Peter William Impact Critical Products Firefox, SeaMonkey, Thunderbird Fixed in ...

#!/usr/bin/python # FireFox 20016 Windows XP SP3 x86 Remote Exploit # Author: Dominic Chell <dmc@deadbeefcouk> # # Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016 # As of September 2009 there are no public exploits for this vulnerability # However, according to securityfocus an exploit is available in both Canv ...

Mozilla Firefox version 20016 Windows XP SP3 UTF-8 URL buffer overflow exploit that has adduser shellcode ...

Get Started

CVE-2008-0016

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect