Lucene search

RedhatCVE-2008-1236

HistoryMar 27, 2008 - 10:44 a.m.

CVE-2008-1236

2008-03-2710:44:00

CWE-399

redhat

web.nvd.nist.gov

cve

2008

1236

mozilla

firefox

thunderbird

seamonkey

denial of service

crash

arbitrary code

vulnerability

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

9.9

Confidence

High

EPSS

0.461

Percentile

97.5%

JSON

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.

Affected configurations

Nvd

Node

mozillafirefoxRange≤2.0.0.12

mozillaseamonkeyRange≤1.1.8

mozillathunderbirdRange≤2.0.0.12

VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
mozillathunderbird*cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::
mozilla	seamonkey	*	cpe:2.3:a:mozilla:seamonkey::::::::
mozilla	thunderbird	*	cpe:2.3:a:mozilla:thunderbird::::::::

References

lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html

rhn.redhat.com/errata/RHSA-2008-0208.html

secunia.com/advisories/29391

secunia.com/advisories/29526

secunia.com/advisories/29539

secunia.com/advisories/29541

secunia.com/advisories/29547

secunia.com/advisories/29548

secunia.com/advisories/29550

secunia.com/advisories/29558

secunia.com/advisories/29560

secunia.com/advisories/29607

secunia.com/advisories/29616

secunia.com/advisories/29645

secunia.com/advisories/30016

secunia.com/advisories/30094

secunia.com/advisories/30105

secunia.com/advisories/30192

secunia.com/advisories/30327

secunia.com/advisories/30370

secunia.com/advisories/30620

secunia.com/advisories/31043

sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1

sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1

wiki.rpath.com/wiki/Advisories:rPSA-2008-0128

www.debian.org/security/2008/dsa-1532

www.debian.org/security/2008/dsa-1534

www.debian.org/security/2008/dsa-1535

www.debian.org/security/2008/dsa-1574

www.gentoo.org/security/en/glsa/glsa-200805-18.xml

www.mandriva.com/security/advisories?name=MDVSA-2008:080

www.mandriva.com/security/advisories?name=MDVSA-2008:155

www.mozilla.org/security/announce/2008/mfsa2008-15.html

www.redhat.com/support/errata/RHSA-2008-0207.html

www.redhat.com/support/errata/RHSA-2008-0209.html

www.securityfocus.com/archive/1/490196/100/0/threaded

www.securityfocus.com/bid/28448

www.securitytracker.com/id?1019695

www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313

www.ubuntu.com/usn/usn-592-1

www.ubuntu.com/usn/usn-605-1

www.us-cert.gov/cas/techalerts/TA08-087A.html

www.vupen.com/english/advisories/2008/0998/references

www.vupen.com/english/advisories/2008/0999/references

www.vupen.com/english/advisories/2008/1793/references

www.vupen.com/english/advisories/2008/2091/references

exchange.xforce.ibmcloud.com/vulnerabilities/41445

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11788

www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html

www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

9.9

Confidence

High

EPSS

0.461

Percentile

97.5%

JSON

Related for CVE-2008-1236