CVEvulnerability

CVE-2008-5500

10.0 HIGH Published 2008-12-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-399

Description

The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.

Affected configurations

• mozilla firefox (>= 2.0 < 2.0.0.19) • mozilla firefox (>= 3.0 < 3.0.5) • mozilla seamonkey (>= 1.0 < 1.1.14) • mozilla thunderbird (>= 2.0 < 2.0.0.19) • canonical ubuntu linux 6.06 • canonical ubuntu linux 7.10 • canonical ubuntu linux 8.04 • canonical ubuntu linux 8.10 • debian debian linux 4.0 • debian debian linux 5.0

Related

Weakness · not in database (1)

References