PT-2008-6932 · Debian+3 · Libmozjs0D+15
Jesse Ruderman
·
Publicado
1970-01-01
·
Atualizado
2024-06-15
·
CVE-2008-5014
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 3.x through 3.0.1
Mozilla Firefox versions 2.x through 2.0.0.17
Thunderbird versions 2.x through 2.0.0.17
SeaMonkey versions 1.x through 1.1.12
Description
The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code by modifying the
window. proto . proto object, triggering an assertion failure related to the OBJ IS NATIVE function. Multiple vulnerabilities in various Debian GNU/Linux packages, including libxul0d-dbg, libxul-dev, libsmjs1, libmozjs0d-dbg, libmozjs0d, libxul0d, libnss3-0d-dbg, libsmjs-dev, libnss3-0d, and libxul-common, can lead to disruption of confidentiality, integrity, and availability of protected information, and can be exploited remotely.Recommendations
For Mozilla Firefox versions 3.x through 3.0.1, update to version 3.0.2 or later.
For Mozilla Firefox versions 2.x through 2.0.0.17, update to version 2.0.0.18 or later.
For Thunderbird versions 2.x through 2.0.0.17, update to version 2.0.0.18 or later.
For SeaMonkey versions 1.x through 1.1.12, update to version 1.1.13 or later.
As a temporary workaround, consider restricting access to sensitive information and monitoring for potential security breaches until the issue is resolved.
Exploit
Correção
DoS
Buffer Overflow
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Firefox
Red Hat
Seamonkey
Suse
Thunderbird
Libmozjs0D
Libmozjs0D-Dbg
Libnss3-0D
Libnss3-0D-Dbg
Libsmjs-Dev
Libsmjs1
Libxul-Common
Libxul-Dev
Libxul0D
Libxul0D-Dbg