CVE-2008-5018 The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of se...
HighCVSS 10.0
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient class checking" in the Date class.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | >= 2.0, < 2.0.0.18 | 2.0.0.18 |
| mozilla Firefox | >= 3.0, < 3.0.4 | 3.0.4 |
| mozilla seamonkey | >= 1.0, < 1.1.13 | 1.1.13 |
| mozilla Thunderbird | >= 2.0, < 2.0.0.18 | 2.0.0.18 |
| debian linux | = 4.0 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 8.10 | No fix listed |
References
- SUSE-SA:2008:055 third-party-advisory vendor-advisory
- 32684 third-party-advisory
- 32693 third-party-advisory
- 32694 third-party-advisory
- 32695 third-party-advisory
- 32713 third-party-advisory
- 32714 third-party-advisory
- 32715 third-party-advisory
- 32721 third-party-advisory
- 32778 third-party-advisory
- 32798 third-party-advisory
- 32845 third-party-advisory
- 32853 third-party-advisory
- 33434 third-party-advisory
- 34501 third-party-advisory
- 256408 broken-link vendor-advisory
- USN-667-1 third-party-advisory vendor-advisory
- DSA-1669 third-party-advisory vendor-advisory
- DSA-1671 third-party-advisory vendor-advisory
- DSA-1696 third-party-advisory vendor-advisory
- MDVSA-2008:228 third-party-advisory vendor-advisory
- MDVSA-2008:230 third-party-advisory vendor-advisory
- MDVSA-2008:235 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- RHSA-2008:0976 third-party-advisory vendor-advisory
- RHSA-2008:0977 third-party-advisory vendor-advisory
- RHSA-2008:0978 third-party-advisory vendor-advisory
- 32281 third-party-advisory vdb-entry
- 1021183 third-party-advisory vdb-entry
- TA08-319A third-party-advisory us-government-resource
- ADV-2008-3146 third-party-advisory vdb-entry
- ADV-2009-0977 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- oval:org.mitre.oval:def:9872 signature third-party-advisory vdb-entry
- FEDORA-2008-9667 third-party-advisory vendor-advisory
- FEDORA-2008-9669 third-party-advisory vendor-advisory