Published: 13/11/2008 Updated: 02/11/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x prior to 2.0.0.18, Thunderbird 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13 allows remote malicious users to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox
mozilla thunderbird
mozilla seamonkey

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic An updated firefox package that fixes various security issues is nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having critical security impact by the RedHat Security Response Team ...

Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic Updated thunderbird packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having moderate security impact by the RedHat Security Response Tea ...

Synopsis Critical: seamonkey security update Type/Severity Security Advisory: Critical Topic Updated seamonkey packages that fix security issues are now available forRed Hat Enterprise Linux 21, Red Hat Enterprise Linux 3 and Red HatEnterprise Linux 4This update has been rated as having critical security ...

CWE-399 https://bugzilla.mozilla.org/show_bug.cgi?id=454113 http://www.mozilla.org/security/announce/2008/mfsa2008-52.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:228 http://www.securityfocus.com/bid/32281 http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html http://www.us-cert.gov/cas/techalerts/TA08-319A.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:235 http://www.securitytracker.com/id?1021183 http://www.vupen.com/english/advisories/2008/3146 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2008:0978

CVE-2008-5052

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect