Published: 17/12/2008 Updated: 08/11/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The layout engine in Mozilla Firefox 3.x prior to 3.0.5, Thunderbird 2.x prior to 2.0.0.19, and SeaMonkey 1.x prior to 1.1.14 allows remote malicious users to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox
mozilla seamonkey
canonical ubuntu linux 8.04
canonical ubuntu linux 8.10

Several flaws were discovered in the browser engine These problems could allow an attacker to crash the browser and possibly execute arbitrary code with user privileges (CVE-2008-5500, CVE-2008-5501, CVE-2008-5502) ...

Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic Updated thunderbird packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having moderate security impact by the RedHat Security Response Tea ...

Synopsis Critical: seamonkey security update Type/Severity Security Advisory: Critical Topic Updated seamonkey packages that fix security issues are now available forRed Hat Enterprise Linux 21, Red Hat Enterprise Linux 3, and Red HatEnterprise Linux 4This update has been rated as having critical security ...

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic An updated firefox package that fixes various security issues is nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having critical security impact by the RedHat Security Response Team ...

Mozilla Foundation Security Advisory 2008-60 Crashes with evidence of memory corruption (rv:1905/18119) Announced December 16, 2008 Reporter Mozilla developers Impact Critical Products Firefox, SeaMonkey, Thunderbird ...

CWE-399 https://bugzilla.mozilla.org/show_bug.cgi?id=458679 http://www.mozilla.org/security/announce/2008/mfsa2008-60.html http://www.redhat.com/support/errata/RHSA-2008-1036.html http://secunia.com/advisories/33189 http://secunia.com/advisories/33203 http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 http://www.securityfocus.com/bid/32882 http://www.redhat.com/support/errata/RHSA-2008-1037.html http://secunia.com/advisories/33188 http://secunia.com/advisories/33216 http://www.securitytracker.com/id?1021417 http://www.redhat.com/support/errata/RHSA-2009-0002.html http://secunia.com/advisories/33421 http://secunia.com/advisories/34501 http://www.vupen.com/english/advisories/2009/0977 http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/47408 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10001 https://usn.ubuntu.com/690-1/https://usn.ubuntu.com/690-1/https://nvd.nist.gov

CVE-2008-5502

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect