PT-2008-6928 · Mozilla+1 · Firefox+12
Billy Hoffman
+1
·
Publicado
1970-01-01
·
Atualizado
2017-09-29
·
CVE-2008-4069
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
libxul0d-dbg versions (affected versions not specified)
libxul-dev versions (affected versions not specified)
libsmjs1 versions (affected versions not specified)
libmozjs0d-dbg versions (affected versions not specified)
libmozjs0d versions (affected versions not specified)
libxul0d versions (affected versions not specified)
libnss3-0d-dbg versions (affected versions not specified)
libnss3-0d versions (affected versions not specified)
libsmjs-dev versions (affected versions not specified)
libxul-common versions (affected versions not specified)
Mozilla Firefox versions prior to 2.0.0.17
SeaMonkey versions prior to 1.1.12
Description
The issue involves multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including libxul0d-dbg, libxul-dev, libsmjs1, libmozjs0d-dbg, libmozjs0d, libxul0d, libnss3-0d-dbg, libnss3-0d, libsmjs-dev, and libxul-common. These vulnerabilities can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Additionally, the XBM decoder in Mozilla Firefox and SeaMonkey is vulnerable to remote attacks, allowing attackers to read uninitialized memory and possibly obtain sensitive information.
Recommendations
For libxul0d-dbg, consider disabling the package until a patch is available.
For libxul-dev, restrict access to the package to minimize the risk of exploitation.
For libsmjs1, avoid using the package in sensitive operations until the issue is resolved.
For libmozjs0d-dbg, consider disabling the package until a patch is available.
For libmozjs0d, restrict access to the package to minimize the risk of exploitation.
For libxul0d, avoid using the package in sensitive operations until the issue is resolved.
For libnss3-0d-dbg, consider disabling the package until a patch is available.
For libnss3-0d, restrict access to the package to minimize the risk of exploitation.
For libsmjs-dev, avoid using the package in sensitive operations until the issue is resolved.
For libxul-common, consider disabling the package until a patch is available.
For Mozilla Firefox, update to version 2.0.0.17 or later.
For SeaMonkey, update to version 1.1.12 or later.
At the moment, there is no information about a newer version that contains a fix for the libxul0d-dbg, libxul-dev, libsmjs1, libmozjs0d-dbg, libmozjs0d, libxul0d, libnss3-0d-dbg, libnss3-0d, libsmjs-dev, and libxul-common vulnerabilities.
Correção
Buffer Overflow
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Red Hat
Seamonkey
Libmozjs0D
Libmozjs0D-Dbg
Libnss3-0D
Libnss3-0D-Dbg
Libsmjs-Dev
Libsmjs1
Libxul-Common
Libxul-Dev
Libxul0D
Libxul0D-Dbg