CVEvulnerability
CVE-2008-5510
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.
Affected configurations
• mozilla firefox (>= 2.0 < 2.0.0.19)
• mozilla firefox (>= 3.0 < 3.0.5)
• mozilla seamonkey (>= 1.0 < 1.1.14)
• mozilla thunderbird (>= 2.0 < 2.0.0.19)
• canonical ubuntu linux 7.10
• canonical ubuntu linux 8.04
• canonical ubuntu linux 8.10
• debian debian linux 4.0
• debian debian linux 5.0
References
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-67.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021425 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=228856 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47415 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9662 Third Party Advisory
- https://usn.ubuntu.com/690-1/ Third Party Advisory
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-67.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021425 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=228856 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47415 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9662 Third Party Advisory
- https://usn.ubuntu.com/690-1/ Third Party Advisory