CVE-2008-5500 — Sensitive Information Exposure in Mozilla Firefox

CWE-399CWE-264CWE-200 — Sensitive Information Exposure15 documents8 sources
Severity
10.0CRITICALNVD
EPSS
6.2%
top 9.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird+2 more
Timeline
PublishedDec 17
Latest updateMay 14

Description

The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox2.0 — 2.0.0.19+1
▶NVDmozilla/seamonkey1.0 — 1.1.14
▶NVDmozilla/thunderbird2.0 — 2.0.0.19

Also affects: Debian Linux 4.0, 5.0, Ubuntu Linux 6.06, 7.10, 8.04, 8.10

🔴Vulnerability Details

2
GHSA
GHSA-6h85-mxrc-rvwx: The layout engine in Mozilla Firefox 3↗2022-05-14
▶
CVEList
CVE-2008-5500: The layout engine in Mozilla Firefox 3↗2008-12-17
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Internet Explorer 7 Video - ActiveX Remote Buffer Overflow↗2009-07-10
▶

📋Vendor Advisories

10
Ubuntu
Thunderbird vulnerabilities↗2009-01-06
▶
Ubuntu
Thunderbird vulnerabilities↗2009-01-06
▶
Ubuntu
Firefox vulnerabilities↗2008-12-18
▶
Ubuntu
Firefox vulnerabilities↗2008-12-18
▶
Ubuntu
Firefox and xulrunner vulnerabilities↗2008-12-17
▶

💬Community

1
Bugzilla
CVE-2008-5500 Layout engine crashes - Firefox 2 and 3↗2008-12-12
▶
CVE-2008-5500 — Sensitive Information Exposure | cvebase