CVE-2008-4063 Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary cod...
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| mozilla Firefox | <= 3.0.1 | No fix listed |
| mozilla Firefox | = 3.0 | No fix listed |
References
- SUSE-SA:2008:050 vendor-advisory
- 31987 third-party-advisory vendor-advisory
- 32011 third-party-advisory vendor-advisory
- 32012 third-party-advisory vendor-advisory
- 32025 third-party-advisory vendor-advisory
- 32044 third-party-advisory vendor-advisory
- 32082 third-party-advisory vendor-advisory
- 32089 third-party-advisory vendor-advisory
- 32095 third-party-advisory vendor-advisory
- 32096 third-party-advisory vendor-advisory
- 32196 third-party-advisory vendor-advisory
- 34501 third-party-advisory vendor-advisory
- SSA:2008-269-02 vendor-advisory
- SSA:2008-270-01 vendor-advisory
- 256408 vendor-advisory
- www.mozilla.org vendor-advisory
- RHSA-2008:0879 vendor-advisory
- 31346 vdb-entry
- 1020916 vdb-entry
- USN-645-1 vendor-advisory
- USN-645-2 vendor-advisory
- USN-647-1 vendor-advisory
- ADV-2008-2661 vdb-entry
- ADV-2009-0977 vdb-entry
- bugzilla.mozilla.org
- bugzilla.mozilla.org
- bugzilla.mozilla.org
- mozilla-firefox-layout-code-execution(45354) vdb-entry
- oval:org.mitre.oval:def:11151 signature vdb-entry
- FEDORA-2008-8425 vendor-advisory