CVE-2008-1380 — Mozilla Firefox vulnerability

5 documents5 sources
Severity
9.3CRITICALNVD
EPSS
17.0%
top 5.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird
Timeline
PublishedApr 17
Latest updateMay 1

Description

The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox2.0.0.13+13
▶NVDmozilla/seamonkey1.1.9+19
▶NVDmozilla/thunderbird2.0.0.13+11

Patches

Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-q7cx-jxvc-hrmp: The JavaScript engine in Mozilla Firefox before 2↗2022-05-01
▶

📋Vendor Advisories

2
Ubuntu
Firefox vulnerabilities↗2008-04-22
▶
Red Hat
Firefox JavaScript garbage collection crash↗2008-04-16
▶

💬Community

1
Bugzilla
CVE-2008-1380 Firefox JavaScript garbage collection crash↗2008-04-03
▶
CVE-2008-1380 — Mozilla Firefox vulnerability | cvebase