PT-2008-6568 · Mozilla+2 · Thunderbird+4

Jesse Ruderman · Published 2008-12-17 · Updated 2018-11-08 · CVE-2008-5501

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.x before 3.0.5 Thunderbird versions 2.x before 2.0.0.19 SeaMonkey versions 1.x before 1.1.14

Description The issue allows remote attackers to cause a denial of service via vectors that trigger an assertion failure in the layout engine.

Recommendations For Mozilla Firefox versions 3.x before 3.0.5, update to version 3.0.5 or later. For Thunderbird versions 2.x before 2.0.0.19, update to version 2.0.0.19 or later. For SeaMonkey versions 1.x before 1.1.14, update to version 1.1.14 or later.

Exploit

Fix

Related Identifiers

CVE-2008-5501

OPENSUSE-SU-2014_1100-1

RHSA-2008:1036

RHSA-2008:1037

RHSA-2008_1036

RHSA-2008_1037

RHSA-2009:0002

RHSA-2009_0002

Affected Products

Firefox

Red Hat

Seamonkey

Suse

Thunderbird

References · 1029

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_tostring_console_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_attribchildremoved.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_webidl_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_onreadystatechange.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proto_crmfrequest.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_reduceright.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_nssvgvalue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_interleaved_write.rb · Exploit
• 🔥 https://github.com/vlad902/annotated-fbi-tbb-exploit · Exploit
• 🔥 https://github.com/argp/cve-2011-3026-firefox · Exploit
• 🔥 https://github.com/mk219533/CVE-2010-1205 · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• https://bdu.fstec.ru/vul/2015-02789 · Security Note