CVE-2008-5052 The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a d...
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | >= 2.0, < 2.0.0.18 | 2.0.0.18 |
| mozilla seamonkey | >= 1.0, <= 1.1.13 | No fix listed |
| mozilla Thunderbird | >= 2.0, < 2.0.0.18 | 2.0.0.18 |
References
- SUSE-SA:2008:055 third-party-advisory vendor-advisory
- MDVSA-2008:228 third-party-advisory vendor-advisory
- MDVSA-2008:235 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- 32281 third-party-advisory vdb-entry
- 1021183 third-party-advisory vdb-entry
- TA08-319A third-party-advisory us-government-resource
- ADV-2008-3146 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- oval:org.mitre.oval:def:9449 signature third-party-advisory vdb-entry