Published: 13/11/2008 Updated: 13/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The layout engine in Mozilla Firefox 3.x prior to 3.0.4, Thunderbird 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13 allows remote malicious users to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla seamonkey 1.1.10
mozilla seamonkey 1.0.3
mozilla thunderbird 2.0.0.4
mozilla seamonkey 1.1.8
mozilla seamonkey 1.0.1
mozilla seamonkey 1.1.7
mozilla thunderbird 2.0.0.6
mozilla seamonkey 1.0.6
mozilla seamonkey 1.0.9
mozilla seamonkey 1.1.3
mozilla seamonkey 1.0
mozilla thunderbird 2.0.0.9
mozilla seamonkey 1.1.5
mozilla seamonkey 1.0.7
mozilla seamonkey
mozilla seamonkey 1.1
mozilla firefox 3.0
mozilla seamonkey 1.1.2
mozilla seamonkey 1.0.2
mozilla seamonkey 1.0.8
mozilla thunderbird 2.0.0.0
mozilla seamonkey 1.1.11
mozilla seamonkey 1.1.1
mozilla thunderbird 2.0.0.12
mozilla seamonkey 1.0.5
mozilla thunderbird 2.0.0.14
mozilla seamonkey 1.1.6
mozilla firefox 3.0.1
mozilla firefox 3.0.2
mozilla thunderbird 2.0.0.5
mozilla seamonkey 1.0.4
mozilla seamonkey 1.1.9
mozilla thunderbird
mozilla firefox
mozilla seamonkey 1.1.4

Georgi Guninski, Michal Zalewsk and Chris Evans discovered that the same-origin check in Thunderbird could be bypassed If a user were tricked into opening a malicious website, an attacker could obtain private information from data stored in the images, or discover information about software on the user’s computer (CVE-2008-5012) ...

Liu Die Yu discovered an information disclosure vulnerability in Firefox when using saved url shortcut files If a user were tricked into downloading a crafted url file and a crafted HTML file, an attacker could steal information from the user’s cache (CVE-2008-4582) ...

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic An updated firefox package that fixes various security issues is nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having critical security impact by the RedHat Security Response Team ...

Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic Updated thunderbird packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having moderate security impact by the RedHat Security Response Tea ...

Synopsis Critical: seamonkey security update Type/Severity Security Advisory: Critical Topic Updated seamonkey packages that fix security issues are now available forRed Hat Enterprise Linux 21, Red Hat Enterprise Linux 3 and Red HatEnterprise Linux 4This update has been rated as having critical security ...

Mozilla Foundation Security Advisory 2008-52 Crashes with evidence of memory corruption (rv:1904/18118) Announced November 12, 2008 Reporter Mozilla developers and community Impact Critical Products Firefox, SeaMonkey, ...

CVE-2008-5016

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect