VulnerabilityModified
CVE-2008-5502
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity…
MEDIUM 5.0EPSS 2.27%
Does this matter?
Lower severity and a low EPSS score (2.27%). Track it; it rarely justifies an emergency change on its own.
Description
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.27% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- mozilla/firefox · mozilla/seamonkey · canonical/ubuntu linux
- Source
- secalert@redhat.com
References
- http://secunia.com/advisories/33188Third Party Advisory
- http://secunia.com/advisories/33189Third Party Advisory
- http://secunia.com/advisories/33203Third Party Advisory
- http://secunia.com/advisories/33216Third Party Advisory
- http://secunia.com/advisories/33421Third Party Advisory
- http://secunia.com/advisories/34501Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-60.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.htmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.htmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.htmlThird Party Advisory
- http://www.securityfocus.com/bid/32882Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021417Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2009/0977Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=458679Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47408Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10001Third Party Advisory
- https://usn.ubuntu.com/690-1/Third Party Advisory
- http://secunia.com/advisories/33188Third Party Advisory
- http://secunia.com/advisories/33189Third Party Advisory
- http://secunia.com/advisories/33203Third Party Advisory
- http://secunia.com/advisories/33216Third Party Advisory
- http://secunia.com/advisories/33421Third Party Advisory
- http://secunia.com/advisories/34501Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-60.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.htmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.