CVE-2008-3444 — Improper Input Validation in Mozilla Firefox

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.8%
top 26.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedAug 4
Latest updateMay 2

Description

The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted but well-formed web page that contains "a simple set of legitimate HTML tags."

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox3.0, 3.0.1+1

🔴Vulnerability Details

1
GHSA
GHSA-m3mc-w2qf-4wc3: The content layout component in Mozilla Firefox 3↗2022-05-02
▶

📋Vendor Advisories

1
Red Hat
CVE-2008-3444: The content layout component in Mozilla Firefox 3↗
▶