CVE-2008-5014 jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (cras...
HighCVSS 10.0
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.proto.proto object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | >= 2.0, < 2.0.0.18 | 2.0.0.18 |
| mozilla Firefox | >= 3.0, < 3.0.2 | 3.0.2 |
| mozilla seamonkey | >= 1.0, < 1.1.13 | 1.1.13 |
| mozilla Thunderbird | >= 2.0, < 2.0.0.18 | 2.0.0.18 |
| debian linux | = 4.0 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 8.10 | No fix listed |
References
- SUSE-SA:2008:055 third-party-advisory vendor-advisory
- 32011 third-party-advisory
- 32684 third-party-advisory
- 32693 third-party-advisory
- 32694 third-party-advisory
- 32695 third-party-advisory
- 32714 third-party-advisory
- 32715 third-party-advisory
- 32721 third-party-advisory
- 32778 third-party-advisory
- 32798 third-party-advisory
- 32845 third-party-advisory
- 32853 third-party-advisory
- 33433 third-party-advisory
- 33434 third-party-advisory
- 34501 third-party-advisory
- 256408 broken-link vendor-advisory
- USN-667-1 third-party-advisory vendor-advisory
- DSA-1669 third-party-advisory vendor-advisory
- DSA-1671 third-party-advisory vendor-advisory
- DSA-1696 third-party-advisory vendor-advisory
- DSA-1697 third-party-advisory vendor-advisory
- MDVSA-2008:228 third-party-advisory vendor-advisory
- MDVSA-2008:230 third-party-advisory vendor-advisory
- MDVSA-2008:235 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- RHSA-2008:0976 third-party-advisory vendor-advisory
- RHSA-2008:0977 third-party-advisory vendor-advisory
- RHSA-2008:0978 third-party-advisory vendor-advisory
- 32281 third-party-advisory vdb-entry
- 1021182 third-party-advisory vdb-entry
- TA08-319A third-party-advisory us-government-resource
- ADV-2008-3146 third-party-advisory vdb-entry
- ADV-2009-0977 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- oval:org.mitre.oval:def:9157 signature third-party-advisory vdb-entry
- FEDORA-2008-9667 third-party-advisory vendor-advisory
- FEDORA-2008-9669 third-party-advisory vendor-advisory