PT-2008-6928 · Mozilla+1 · Firefox+12
Billy Hoffman
+1
·
Published
1970-01-01
·
Updated
2017-09-29
·
CVE-2008-4069
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
libxul0d-dbg versions (affected versions not specified)
libxul-dev versions (affected versions not specified)
libsmjs1 versions (affected versions not specified)
libmozjs0d-dbg versions (affected versions not specified)
libmozjs0d versions (affected versions not specified)
libxul0d versions (affected versions not specified)
libnss3-0d-dbg versions (affected versions not specified)
libnss3-0d versions (affected versions not specified)
libsmjs-dev versions (affected versions not specified)
libxul-common versions (affected versions not specified)
Mozilla Firefox versions prior to 2.0.0.17
SeaMonkey versions prior to 1.1.12
Description
The issue involves multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including libxul0d-dbg, libxul-dev, libsmjs1, libmozjs0d-dbg, libmozjs0d, libxul0d, libnss3-0d-dbg, libnss3-0d, libsmjs-dev, and libxul-common. These vulnerabilities can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Additionally, the XBM decoder in Mozilla Firefox and SeaMonkey is vulnerable to remote attacks, allowing attackers to read uninitialized memory and possibly obtain sensitive information.
Recommendations
For libxul0d-dbg, consider disabling the package until a patch is available.
For libxul-dev, restrict access to the package to minimize the risk of exploitation.
For libsmjs1, avoid using the package in sensitive operations until the issue is resolved.
For libmozjs0d-dbg, consider disabling the package until a patch is available.
For libmozjs0d, restrict access to the package to minimize the risk of exploitation.
For libxul0d, avoid using the package in sensitive operations until the issue is resolved.
For libnss3-0d-dbg, consider disabling the package until a patch is available.
For libnss3-0d, restrict access to the package to minimize the risk of exploitation.
For libsmjs-dev, avoid using the package in sensitive operations until the issue is resolved.
For libxul-common, consider disabling the package until a patch is available.
For Mozilla Firefox, update to version 2.0.0.17 or later.
For SeaMonkey, update to version 1.1.12 or later.
At the moment, there is no information about a newer version that contains a fix for the libxul0d-dbg, libxul-dev, libsmjs1, libmozjs0d-dbg, libmozjs0d, libxul0d, libnss3-0d-dbg, libnss3-0d, libsmjs-dev, and libxul-common vulnerabilities.
Fix
Buffer Overflow
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Firefox
Red Hat
Seamonkey
Libmozjs0D
Libmozjs0D-Dbg
Libnss3-0D
Libnss3-0D-Dbg
Libsmjs-Dev
Libsmjs1
Libxul-Common
Libxul-Dev
Libxul0D
Libxul0D-Dbg