Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-5016

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2008-5016
Last Modified 30 Oct 2012 11:06:31
Published 13 Nov 2008 06:30:01
Confidentiality Impact NONE NONE
Integrity Impact NONE NONE
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-5016

Summary

The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.

Vulnerable Systems

Application

  • Mozilla Firefox 3.0

  • Mozilla Firefox 3.0.1

  • Mozilla Firefox 3.0.2

  • Mozilla Firefox 3.0.3

  • Mozilla Seamonkey 1.0

  • Mozilla Seamonkey 1.0.1

  • Mozilla Seamonkey 1.0.2

  • Mozilla Seamonkey 1.0.3

  • Mozilla Seamonkey 1.0.4

  • Mozilla Seamonkey 1.0.5

  • Mozilla Seamonkey 1.0.6

  • Mozilla Seamonkey 1.0.7

  • Mozilla Seamonkey 1.0.8

  • Mozilla Seamonkey 1.0.9

  • Mozilla Seamonkey 1.1

  • Mozilla Seamonkey 1.1.1

  • Mozilla Seamonkey 1.1.10

  • Mozilla Seamonkey 1.1.11

  • Mozilla Seamonkey 1.1.12

  • Mozilla Seamonkey 1.1.2

  • Mozilla Seamonkey 1.1.3

  • Mozilla Seamonkey 1.1.4

  • Mozilla Seamonkey 1.1.5

  • Mozilla Seamonkey 1.1.6

  • Mozilla Seamonkey 1.1.7

  • Mozilla Seamonkey 1.1.8

  • Mozilla Seamonkey 1.1.9

  • Mozilla Thunderbird 2.0.0.0

  • Mozilla Thunderbird 2.0.0.12

  • Mozilla Thunderbird 2.0.0.14

  • Mozilla Thunderbird 2.0.0.17

  • Mozilla Thunderbird 2.0.0.4

  • Mozilla Thunderbird 2.0.0.5

  • Mozilla Thunderbird 2.0.0.6

  • Mozilla Thunderbird 2.0.0.9


References

CERT - TA08-319A

FEDORA - FEDORA-2008-9669

MISC - https://bugzilla.mozilla.org/buglist.cgi?bug_id=439206,453406,458637,444864,452157,449111,444260,457375,433429,443528,430394

VUPEN - ADV-2009-0977

VUPEN - ADV-2008-3146

SECTRACK - 1021183

BID - 32281

REDHAT - RHSA-2008:0978

REDHAT - RHSA-2008:0977

CONFIRM - http://www.mozilla.org/security/announce/2008/mfsa2008-52.html

MANDRIVA - MDVSA-2008:235

SUNALERT - 256408

SECUNIA - 34501

SECUNIA - 32721

SECUNIA - 32695

SECUNIA - 32694

SUSE - SUSE-SA:2008:055

FEDORA - FEDORA-2008-9667

REDHAT - RHSA-2008:0976

MANDRIVA - MDVSA-2008:230

UBUNTU - USN-667-1

SECUNIA - 32798

SECUNIA - 32778

SECUNIA - 32713

SECUNIA - 32684

Related Patches

Novell SUSE 2008:5786 MozillaFirefox security update for SLE 10 i586

Novell SUSE 2008:5811 gecko-sdk security update for SLE 10 SP1 i586

Novell SUSE 2008:5813 gecko-sdk security update for SLE 10 SP2 i586


Last Updated: 27 May 2016 10:49:46