CVE-2008-5013 — Expired Pointer Dereference in Mozilla Firefox

CWE-399CWE-825 — Expired Pointer Dereference7 documents7 sources
Severity
9.3CRITICALNVD
EPSS
23.9%
top 3.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla FirefoxMozilla Seamonkey
Timeline
PublishedNov 13
Latest updateMay 14

Description

Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDmozilla/firefox2.0.0.17+56
▶NVDmozilla/seamonkey1.1.12+23

🔴Vulnerability Details

2
GHSA
GHSA-7pc8-c743-pmjf: Mozilla Firefox 2↗2022-05-14
▶
CVEList
CVE-2008-5013: Mozilla Firefox 2↗2008-11-13
▶

📋Vendor Advisories

2
Ubuntu
Firefox and xulrunner vulnerabilities↗2008-11-17
▶
Red Hat
Mozilla Flash Player dynamic module unloading flaw↗2008-11-12
▶

📐Framework References

1
CWE
Expired Pointer Dereference↗
▶

💬Community

1
Bugzilla
CVE-2008-5013 Mozilla Flash Player dynamic module unloading flaw↗2008-11-10
▶
CVE-2008-5013 — Expired Pointer Dereference in Mozilla | cvebase