CVE-2008-4064 Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary cod...
HighCVSS 10.0
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairo_surface_set_device_offset function, (2) integer overflows when handling animated PNG data in the info_callback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 3.0.1 | No fix listed |
| mozilla Firefox | = 3.0 | No fix listed |
References
- SUSE-SA:2008:050 vendor-advisory
- 31987 third-party-advisory
- 32011 third-party-advisory
- 32012 third-party-advisory
- 32025 third-party-advisory
- 32044 third-party-advisory
- 32082 third-party-advisory
- 32089 third-party-advisory
- 32095 third-party-advisory
- 32096 third-party-advisory
- 32196 third-party-advisory
- 34501 third-party-advisory
- SSA:2008-269-02 vendor-advisory
- SSA:2008-270-01 vendor-advisory
- 256408 vendor-advisory
- www.mozilla.org
- RHSA-2008:0879 vendor-advisory
- 31346 vdb-entry
- 1020916 vdb-entry
- USN-645-1 vendor-advisory
- USN-645-2 vendor-advisory
- USN-647-1 vendor-advisory
- ADV-2008-2661 vdb-entry
- ADV-2009-0977 vdb-entry
- bugzilla.mozilla.org
- bugzilla.mozilla.org
- bugzilla.mozilla.org
- firefox-imagegraphics-code-execution(45357) vdb-entry
- oval:org.mitre.oval:def:11743 signature vdb-entry
- FEDORA-2008-8425 vendor-advisory