CVEvulnerability
CVE-2008-5508
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.
Affected configurations
• mozilla firefox (>= 2.0 < 2.0.0.19)
• mozilla firefox (>= 3.0 < 3.0.5)
• mozilla seamonkey (>= 1.0 < 1.1.14)
• mozilla thunderbird (>= 2.0 < 2.0.0.19)
• canonical ubuntu linux 6.06
• canonical ubuntu linux 7.10
• canonical ubuntu linux 8.04
• canonical ubuntu linux 8.10
• debian debian linux 4.0
• debian debian linux 5.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33189 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33415 Third Party Advisory
- http://secunia.com/advisories/33421 Third Party Advisory
- http://secunia.com/advisories/33433 Third Party Advisory
- http://secunia.com/advisories/33434 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/33547 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1696 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-66.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.html Third Party Advisory
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021426 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-2 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=425046 Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=460803 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47414 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11040 Third Party Advisory
- https://usn.ubuntu.com/690-1/ Third Party Advisory
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33189 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33415 Third Party Advisory
- http://secunia.com/advisories/33421 Third Party Advisory
- http://secunia.com/advisories/33433 Third Party Advisory
- http://secunia.com/advisories/33434 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/33547 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1696 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-66.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.html Third Party Advisory
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021426 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-2 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=425046 Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=460803 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47414 Third Party Advisory, VDB Entry