CVE-2008-0412 — Out-of-bounds Write in Mozilla Firefox

CWE-3997 documents5 sources
Severity
9.3CRITICALNVD
EPSS
11.6%
top 6.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird
Timeline
PublishedFeb 8
Latest updateMay 1

Description

The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSp…

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox2.0.0.11
▶NVDmozilla/thunderbird2.0.0.11

🔴Vulnerability Details

1
GHSA
GHSA-cj4c-5gff-3x9p: The browser engine in Mozilla Firefox before 2↗2022-05-01
▶

📋Vendor Advisories

4
Ubuntu
Thunderbird regression↗2008-03-06
▶
Ubuntu
Thunderbird vulnerabilities↗2008-02-29
▶
Ubuntu
Firefox vulnerabilities↗2008-02-08
▶
Red Hat
Mozilla layout engine crashes↗2008-02-07
▶

💬Community

1
Bugzilla
CVE-2008-0412 Mozilla layout engine crashes↗2008-02-06
▶
CVE-2008-0412 — Out-of-bounds Write in Mozilla Firefox | cvebase