CVE-2008-5500 The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (cr...
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | >= 2.0, < 2.0.0.19 | 2.0.0.19 |
| mozilla Firefox | >= 3.0, < 3.0.5 | 3.0.5 |
| mozilla seamonkey | >= 1.0, < 1.1.14 | 1.1.14 |
| mozilla Thunderbird | >= 2.0, < 2.0.0.19 | 2.0.0.19 |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 8.10 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| debian linux | = 5.0 | No fix listed |
References
- 33184 third-party-advisory
- 33188 third-party-advisory
- 33189 third-party-advisory
- 33203 third-party-advisory
- 33204 third-party-advisory
- 33205 third-party-advisory
- 33216 third-party-advisory
- 33231 third-party-advisory
- 33232 third-party-advisory
- 33408 third-party-advisory
- 33415 third-party-advisory
- 33421 third-party-advisory
- 33433 third-party-advisory
- 33434 third-party-advisory
- 33523 third-party-advisory
- 33547 third-party-advisory
- 34501 third-party-advisory
- 35080 third-party-advisory
- 256408 broken-link vendor-advisory
- 258748 broken-link vendor-advisory
- DSA-1696 third-party-advisory vendor-advisory
- DSA-1697 third-party-advisory vendor-advisory
- DSA-1704 third-party-advisory vendor-advisory
- DSA-1707 third-party-advisory vendor-advisory
- MDVSA-2008:244 third-party-advisory vendor-advisory
- MDVSA-2008:245 third-party-advisory vendor-advisory
- MDVSA-2009:012 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- RHSA-2008:1036 third-party-advisory vendor-advisory
- RHSA-2008:1037 third-party-advisory vendor-advisory
- RHSA-2009:0002 third-party-advisory vendor-advisory
- 32882 third-party-advisory vdb-entry
- 1021417 third-party-advisory vdb-entry
- USN-690-2 third-party-advisory vendor-advisory
- USN-701-1 third-party-advisory vendor-advisory
- USN-701-2 third-party-advisory vendor-advisory
- ADV-2009-0977 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- mozilla-layout-code-execution-var3(47406) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:11053 signature third-party-advisory vdb-entry
- USN-690-1 third-party-advisory vendor-advisory
- USN-690-3 third-party-advisory vendor-advisory