CVE-2008-5500
published 2008-12-17CVE-2008-5500: The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote…
PriorityP429critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
3.20%
86.8th percentile
The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| mozilla | firefox | >= 2.0 < 2.0.0.19 | 2.0.0.19 |
| mozilla | firefox | >= 3.0 < 3.0.5 | 3.0.5 |
| mozilla | seamonkey | >= 1.0 < 1.1.14 | 1.1.14 |
| mozilla | thunderbird | >= 2.0 < 2.0.0.19 | 2.0.0.19 |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
vendor_ubuntu10.0CRITICAL
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2009-01-06·CVSS 10.0
CVE-2008-5500 [CRITICAL] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Thunderbird vulnerabilities
Several flaws were discovered in the browser engine. If a user had Javascript
enabled, these problems could allow an attacker to crash Thunderbird and
possibly execute arbitrary code with user privileges. (CVE-2008-5500)
Boris Zbarsky discovered that the same-origin check in Thunderbird could be
bypassed by utilizing XBL-bindings. If a user had Javascript enabled, an
attacker could exploit this to read data from other domains. (CVE-2008-5503)
Marius Schilder discovered that Thunderbird did not properly handle redirects
to an outside domain when an XMLHttpRequest was made to a same-origin resource.
When Javascript is enabled, it's possible that sensitive information could be
revealed in the XMLHttpRequest response.
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2009-01-06·CVSS 10.0
CVE-2008-5500 [CRITICAL] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Thunderbird vulnerabilities
Several flaws were discovered in the browser engine. If a user had Javascript
enabled, these problems could allow an attacker to crash Thunderbird and
possibly execute arbitrary code with user privileges. (CVE-2008-5500)
Boris Zbarsky discovered that the same-origin check in Thunderbird could be
bypassed by utilizing XBL-bindings. If a user had Javascript enabled, an
attacker could exploit this to read data from other domains. (CVE-2008-5503)
Marius Schilder discovered that Thunderbird did not properly handle redirects
to an outside domain when an XMLHttpRequest was made to a same-origin resource.
When Javascript is enabled, it's possible that sensitive information could be
revealed in the XMLHttpRequest response.
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2008-12-18·CVSS 10.0
CVE-2008-5503 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox vulnerabilities
Several flaws were discovered in the browser engine. These problems could allow
an attacker to crash the browser and possibly execute arbitrary code with user
privileges. (CVE-2008-5500)
Boris Zbarsky discovered that the same-origin check in Firefox could be
bypassed by utilizing XBL-bindings. An attacker could exploit this to read data
from other domains. (CVE-2008-5503)
Marius Schilder discovered that Firefox did not properly handle redirects to
an outside domain when an XMLHttpRequest was made to a same-origin resource.
It's possible that sensitive information could be revealed in the
XMLHttpRequest response. (CVE-2008-5506)
Chris Evans discovered that Firefox did not properly protect a user's data when
accessing a sam
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2008-12-18·CVSS 10.0
CVE-2008-5510 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox vulnerabilities
Several flaws were discovered in the browser engine. These problems could allow
an attacker to crash the browser and possibly execute arbitrary code with user
privileges. (CVE-2008-5500)
Boris Zbarsky discovered that the same-origin check in Firefox could be
bypassed by utilizing XBL-bindings. An attacker could exploit this to read data
from other domains. (CVE-2008-5503)
Several problems were discovered in the JavaScript engine. An attacker could
exploit feed preview vulnerabilities to execute scripts from page content with
chrome privileges. (CVE-2008-5504)
Marius Schilder discovered that Firefox did not properly handle redirects to
an outside domain when an XMLHttpRequest was made to a same-origin resource.
It's possib
Ubuntu
Firefox and xulrunner vulnerabilities
vendor_ubuntu·2008-12-17·CVSS 10.0
CVE-2008-5502 [CRITICAL] Firefox and xulrunner vulnerabilities
Title: Firefox and xulrunner vulnerabilities
Summary: Firefox and xulrunner vulnerabilities
Several flaws were discovered in the browser engine. These problems could allow
an attacker to crash the browser and possibly execute arbitrary code with user
privileges. (CVE-2008-5500, CVE-2008-5501, CVE-2008-5502)
It was discovered that Firefox did not properly handle persistent cookie data.
If a user were tricked into opening a malicious website, an attacker could
write persistent data in the user's browser and track the user across browsing
sessions. (CVE-2008-5505)
Marius Schilder discovered that Firefox did not properly handle redirects to
an outside domain when an XMLHttpRequest was made to a same-origin resource.
It's possible that sensitive information could be revealed in the
XMLHttpR
Red Hat
Layout engine crashes - Firefox 2 and 3
vendor_redhat·2008-12-16·CVSS 10.0
CVE-2008-5500 [CRITICAL] Layout engine crashes - Firefox 2 and 3
Layout engine crashes - Firefox 2 and 3
The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco·2008-10-22·CVSS 7.8
CVE-2008-3815 [HIGH] CWE-264 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines details of these vulnerabilities:
Windows NT Domain Authentication Bypass Vulnerability
IPv6 Denial of Service Vulnerability
Crypto Accelerator Memory Leak Vulnerability
Note: These vulnerabilities are independent of each other. A device may
be affected by one vulnerability and not affected by another.
Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate some of these vulnerabilities are
available.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20081022-asa.
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco·2008-09-03·CVSS 7.8
CVE-2008-2732 [HIGH] CWE-200 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances that may result in a
reload of the device or disclosure of confidential information. This security
advisory outlines details of the following vulnerabilities:
Erroneous SIP Processing Vulnerabilities
IPSec Client Authentication Processing Vulnerability
SSL VPN Memory Leak Vulnerability
URI Processing Error Vulnerability in SSL VPNs
Potential Information Disclosure in Clientless VPNs
Note: These vulnerabilities are independent of each other. A device may be
affected by one vulnerability and not affected by another. Cisco has released software updates that address these vulnerabilities. Wor
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco·2008-06-04·CVSS 7.8
CVE-2008-2055 [HIGH] CWE-399 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines details of these vulnerabilities:
Crafted TCP ACK Packet Vulnerability
Crafted TLS Packet Vulnerability
Instant Messenger Inspection Vulnerability
Vulnerability Scan Denial of Service
Control-plane Access Control List Vulnerability
The first four vulnerabilities may lead to a denial of service (DoS)
condition and the fifth vulnerability may allow an attacker to bypass
control-plane access control lists (ACL).
Note: These vulnerabilities are independent of each other. A device may be
affected by one vulnerability and not affected by another.
Cisco has released software updat
Cisco
Cisco PIX and ASA Time-to-Live Vulnerability
vendor_cisco·2008-01-23·CVSS 7.1
CVE-2008-0028 [HIGH] CWE-399 Cisco PIX and ASA Time-to-Live Vulnerability
Cisco PIX and ASA Time-to-Live Vulnerability
A crafted IP packet vulnerability exists in the Cisco PIX 500 Series
Security Appliance (PIX) and the Cisco 5500 Series Adaptive Security Appliance
(ASA) that may result in a reload of the device. This vulnerability is
triggered during processing of a crafted IP packet when the Time-to-Live (TTL)
decrement feature is enabled.
Common Vulnerabilities and Exposures (CVE) identifier CVE-2008-0028 has
been assigned to this vulnerability.
Cisco has released software updates that address this vulnerability. A workaround that mitigates this vulnerability is available.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080123-asa.
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2059 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2059: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-399, CWE-399
Bug IDs: CSCsm84110, CSCsm26841, CSCso22981, CSCsj60659, CSCsm67466
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2734 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2734: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances that may result in a reload of the device or disclosure of confidential information. This security advisory outlines
CWE: CWE-200, CWE-399, CWE-200, CWE-399
Bug IDs: CSCsq07867, CSCsq57091, CSCsk60581, CSCsq39315, CSCso69942
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-3815 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-3815: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCsu65735, CSCsu11575, CSCsj25896
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2733 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2733: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances that may result in a reload of the device or disclosure of confidential information. This security advisory outlines
CWE: CWE-200, CWE-399, CWE-200, CWE-399
Bug IDs: CSCsq07867, CSCsq57091, CSCsk60581, CSCsq39315, CSCso69942
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2057 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2057: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-399, CWE-399
Bug IDs: CSCsm84110, CSCsm26841, CSCso22981, CSCsj60659, CSCsm67466
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2055 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2055: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-399, CWE-399
Bug IDs: CSCsm84110, CSCsm26841, CSCso22981, CSCsj60659, CSCsm67466
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2732 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2732: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances that may result in a reload of the device or disclosure of confidential information. This security advisory outlines
CWE: CWE-200, CWE-399, CWE-200, CWE-399
Bug IDs: CSCsq07867, CSCsq57091, CSCsk60581, CSCsq39315, CSCso69942
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2058 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2058: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-399, CWE-399
Bug IDs: CSCsm84110, CSCsm26841, CSCso22981, CSCsj60659, CSCsm67466
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-3816 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-3816: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCsu65735, CSCsu11575, CSCsj25896
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2735 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2735: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances that may result in a reload of the device or disclosure of confidential information. This security advisory outlines
CWE: CWE-200, CWE-399, CWE-200, CWE-399
Bug IDs: CSCsq07867, CSCsq57091, CSCsk60581, CSCsq39315, CSCso69942
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-3817 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-3817: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCsu65735, CSCsu11575, CSCsj25896
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2736 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2736: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances that may result in a reload of the device or disclosure of confidential information. This security advisory outlines
CWE: CWE-200, CWE-399, CWE-200, CWE-399
Bug IDs: CSCsq07867, CSCsq57091, CSCsk60581, CSCsq39315, CSCso69942
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2056 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2056: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-399, CWE-399
Bug IDs: CSCsm84110, CSCsm26841, CSCso22981, CSCsj60659, CSCsm67466
Cisco
Cisco PIX and ASA Time-to-Live Vulnerability
vendor_cisco
CVE-2008-0028 Cisco PIX and ASA Time-to-Live Vulnerability
CVE-2008-0028: Cisco PIX and ASA Time-to-Live Vulnerability
A crafted IP packet vulnerability exists in the Cisco PIX 500 Series Security Appliance (PIX) and the Cisco 5500 Series Adaptive Security Appliance (ASA) that may result in a reload of the device. This vulnerability is triggered during processing of a crafted IP packet when the Time-to-Live (TTL) decrement feature is enabled. Common Vulnerabilities and Exposures (CVE) identifier CVE-2008-0028 has been assigned to this vulnerability. Cisco has released software updates that address this vulnerability. A workaround that mitigates this vulnerability is available. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080123-asa .
CWE: CWE-399, CWE-399
Bug IDs: CSCsk48199, C
GHSA
GHSA-6h85-mxrc-rvwx: The layout engine in Mozilla Firefox 3
ghsa_unreviewed·2022-05-14
CVE-2008-5500 [HIGH] GHSA-6h85-mxrc-rvwx: The layout engine in Mozilla Firefox 3
The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.
No detection rules found.
http://secunia.com/advisories/33184http://secunia.com/advisories/33188http://secunia.com/advisories/33189http://secunia.com/advisories/33203http://secunia.com/advisories/33204http://secunia.com/advisories/33205http://secunia.com/advisories/33216http://secunia.com/advisories/33231http://secunia.com/advisories/33232http://secunia.com/advisories/33408http://secunia.com/advisories/33415http://secunia.com/advisories/33421http://secunia.com/advisories/33433http://secunia.com/advisories/33434http://secunia.com/advisories/33523http://secunia.com/advisories/33547http://secunia.com/advisories/34501http://secunia.com/advisories/35080http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1http://www.debian.org/security/2009/dsa-1696http://www.debian.org/security/2009/dsa-1697http://www.debian.org/security/2009/dsa-1704http://www.debian.org/security/2009/dsa-1707http://www.mandriva.com/security/advisories?name=MDVSA-2008:244http://www.mandriva.com/security/advisories?name=MDVSA-2008:245http://www.mandriva.com/security/advisories?name=MDVSA-2009:012http://www.mozilla.org/security/announce/2008/mfsa2008-60.htmlhttp://www.redhat.com/support/errata/RHSA-2008-1036.htmlhttp://www.redhat.com/support/errata/RHSA-2008-1037.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0002.htmlhttp://www.securityfocus.com/bid/32882http://www.securitytracker.com/id?1021417http://www.ubuntu.com/usn/usn-690-2http://www.ubuntu.com/usn/usn-701-1http://www.ubuntu.com/usn/usn-701-2http://www.vupen.com/english/advisories/2009/0977https://bugzilla.mozilla.org/show_bug.cgi?id=460803https://bugzilla.mozilla.org/show_bug.cgi?id=464998https://exchange.xforce.ibmcloud.com/vulnerabilities/47406https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11053https://usn.ubuntu.com/690-1/https://usn.ubuntu.com/690-3/http://secunia.com/advisories/33184http://secunia.com/advisories/33188http://secunia.com/advisories/33189http://secunia.com/advisories/33203http://secunia.com/advisories/33204http://secunia.com/advisories/33205http://secunia.com/advisories/33216http://secunia.com/advisories/33231http://secunia.com/advisories/33232http://secunia.com/advisories/33408http://secunia.com/advisories/33415http://secunia.com/advisories/33421http://secunia.com/advisories/33433http://secunia.com/advisories/33434http://secunia.com/advisories/33523http://secunia.com/advisories/33547http://secunia.com/advisories/34501http://secunia.com/advisories/35080http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1http://www.debian.org/security/2009/dsa-1696http://www.debian.org/security/2009/dsa-1697http://www.debian.org/security/2009/dsa-1704http://www.debian.org/security/2009/dsa-1707http://www.mandriva.com/security/advisories?name=MDVSA-2008:244http://www.mandriva.com/security/advisories?name=MDVSA-2008:245http://www.mandriva.com/security/advisories?name=MDVSA-2009:012http://www.mozilla.org/security/announce/2008/mfsa2008-60.htmlhttp://www.redhat.com/support/errata/RHSA-2008-1036.htmlhttp://www.redhat.com/support/errata/RHSA-2008-1037.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0002.htmlhttp://www.securityfocus.com/bid/32882http://www.securitytracker.com/id?1021417http://www.ubuntu.com/usn/usn-690-2http://www.ubuntu.com/usn/usn-701-1http://www.ubuntu.com/usn/usn-701-2http://www.vupen.com/english/advisories/2009/0977https://bugzilla.mozilla.org/show_bug.cgi?id=460803https://bugzilla.mozilla.org/show_bug.cgi?id=464998https://exchange.xforce.ibmcloud.com/vulnerabilities/47406https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11053https://usn.ubuntu.com/690-1/https://usn.ubuntu.com/690-3/
2008-12-17
Published