CVE-2008-4062 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of servi...
HighCVSS 10.0
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 2.0.0.17 | 2.0.0.17 |
| mozilla Firefox | >= 3.0, < 3.0.2 | 3.0.2 |
| mozilla seamonkey | < 1.1.12 | 1.1.12 |
| mozilla Thunderbird | < 2.0.0.17 | 2.0.0.17 |
| debian linux | = 4.0 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
References
- download.novell.com third-party-advisory
- SUSE-SA:2008:050 third-party-advisory vendor-advisory
- 31984 third-party-advisory
- 31985 third-party-advisory
- 31987 third-party-advisory
- 32007 third-party-advisory
- 32010 third-party-advisory
- 32011 third-party-advisory
- 32012 third-party-advisory
- 32025 third-party-advisory
- 32042 third-party-advisory
- 32044 third-party-advisory
- 32082 third-party-advisory
- 32089 third-party-advisory
- 32092 third-party-advisory
- 32095 third-party-advisory
- 32096 third-party-advisory
- 32144 third-party-advisory
- 32185 third-party-advisory
- 32196 third-party-advisory
- 32845 third-party-advisory
- 33433 third-party-advisory
- 33434 third-party-advisory
- 34501 third-party-advisory
- SSA:2008-269-02 third-party-advisory vendor-advisory
- SSA:2008-269-01 third-party-advisory vendor-advisory
- SSA:2008-270-01 third-party-advisory vendor-advisory
- 256408 broken-link vendor-advisory
- DSA-1649 third-party-advisory vendor-advisory
- DSA-1669 third-party-advisory vendor-advisory
- DSA-1696 third-party-advisory vendor-advisory
- DSA-1697 third-party-advisory vendor-advisory
- MDVSA-2008:205 third-party-advisory vendor-advisory
- MDVSA-2008:206 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- RHSA-2008:0879 third-party-advisory vendor-advisory
- RHSA-2008:0882 third-party-advisory vendor-advisory
- RHSA-2008:0908 third-party-advisory vendor-advisory
- 31346 third-party-advisory vdb-entry
- 1020916 third-party-advisory vdb-entry
- USN-645-1 third-party-advisory vendor-advisory
- USN-645-2 third-party-advisory vendor-advisory
- USN-647-1 third-party-advisory vendor-advisory
- ADV-2008-2661 third-party-advisory vdb-entry
- ADV-2009-0977 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- multiple-mozilla-javascript-code-execution(45355) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:10206 signature third-party-advisory vdb-entry
- FEDORA-2008-8425 third-party-advisory vendor-advisory
- FEDORA-2008-8401 third-party-advisory vendor-advisory
- FEDORA-2008-8429 third-party-advisory vendor-advisory