CVE-2008-0413 — Out-of-bounds Write in Mozilla Firefox

CWE-3997 documents5 sources
Severity
9.3CRITICALNVD
EPSS
8.1%
top 7.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird
Timeline
PublishedFeb 8
Latest updateMay 1

Description

The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox2.0.0.11
▶NVDmozilla/thunderbird2.0.0.11

🔴Vulnerability Details

1
GHSA
GHSA-mx7q-m4p3-672f: The JavaScript engine in Mozilla Firefox before 2↗2022-05-01
▶

📋Vendor Advisories

4
Ubuntu
Thunderbird regression↗2008-03-06
▶
Ubuntu
Thunderbird vulnerabilities↗2008-02-29
▶
Ubuntu
Firefox vulnerabilities↗2008-02-08
▶
Red Hat
Mozilla javascript engine crashes↗2008-02-07
▶

💬Community

1
Bugzilla
CVE-2008-0413 Mozilla javascript engine crashes↗2008-02-06
▶
CVE-2008-0413 — Out-of-bounds Write in Mozilla Firefox | cvebase