Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2008-2811
HistoryJul 07, 2008 - 11:41 p.m.

CVE-2008-2811

2008-07-0723:41:00
CWE-399
redhat
web.nvd.nist.gov
60
cve-2008-2811
mozilla firefox
thunderbird
seamonkey
remote code execution
denial of service
image vulnerability
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.435

Percentile

97.4%

JSON

The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image whose display requires more pixels than nscoord_MAX, related to nsBlockFrame::DrainOverflowLines.

Affected configurations

Nvd
Node
mozillafirefoxRange≤2.0.0.14
OR
mozillafirefoxMatch2.0
OR
mozillafirefoxMatch2.0.0.1
OR
mozillafirefoxMatch2.0.0.2
OR
mozillafirefoxMatch2.0.0.3
OR
mozillafirefoxMatch2.0.0.4
OR
mozillafirefoxMatch2.0.0.5
OR
mozillafirefoxMatch2.0.0.6
OR
mozillafirefoxMatch2.0.0.7
OR
mozillafirefoxMatch2.0.0.8
OR
mozillafirefoxMatch2.0.0.9
OR
mozillafirefoxMatch2.0.0.10
OR
mozillafirefoxMatch2.0.0.11
OR
mozillafirefoxMatch2.0.0.12
OR
mozillafirefoxMatch2.0.0.13
OR
mozillaseamonkeyRange≤1.1.9
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1.2
OR
mozillaseamonkeyMatch1.1.3
OR
mozillaseamonkeyMatch1.1.4
OR
mozillaseamonkeyMatch1.1.5
OR
mozillaseamonkeyMatch1.1.6
OR
mozillaseamonkeyMatch1.1.7
OR
mozillaseamonkeyMatch1.1.8
OR
mozillathunderbirdRange≤2.0.0.14
OR
mozillathunderbirdMatch2.0.0.0
OR
mozillathunderbirdMatch2.0.0.1
OR
mozillathunderbirdMatch2.0.0.2
OR
mozillathunderbirdMatch2.0.0.3
OR
mozillathunderbirdMatch2.0.0.4
OR
mozillathunderbirdMatch2.0.0.5
OR
mozillathunderbirdMatch2.0.0.6
OR
mozillathunderbirdMatch2.0.0.8
OR
mozillathunderbirdMatch2.0.0.9
OR
mozillathunderbirdMatch2.0.0.11
OR
mozillathunderbirdMatch2.0.0.12
OR
mozillathunderbirdMatch2.0.0.13
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillafirefox2.0cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*
mozillafirefox2.0.0.1cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*
mozillafirefox2.0.0.2cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*
mozillafirefox2.0.0.3cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*
mozillafirefox2.0.0.4cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*
mozillafirefox2.0.0.5cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*
mozillafirefox2.0.0.6cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*
mozillafirefox2.0.0.7cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*
mozillafirefox2.0.0.8cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*
Rows per page:
1-10 of 371

References

Related

ubuntucve 1
cert 1
nvd 1
securityvulns 2
prion 1
cvelist 1
veracode 1
mozilla 1
openvas 105
nessus 39
fedora 20
ubuntu 2
osv 4
debian 4
centos 5
oraclelinux 4
redhat 4
suse 1
seebug 1
gentoo 1
ubuntucve
ubuntucve
CVE-2008-2811
2008-07-07 00:00:00
cert
cert
Mozilla Firefox code execution vulnerability
2008-07-02 00:00:00
nvd
nvd
CVE-2008-2811
2008-07-07 23:41:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-33
2008-07-03 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2008-07-03 00:00:00
prion
prion
Design/Logic Flaw
2008-07-07 23:41:00
cvelist
cvelist
CVE-2008-2811
2008-07-07 23:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:24:14
mozilla
mozilla
Crash and remote code execution in block reflow — Mozilla
2008-07-01 00:00:00
openvas
openvas
Mozilla Thunderbird Multiple Vulnerabilities (Jul 2008) - Windows
2008-10-06 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities (Jul 2008) - Linux
2008-10-07 00:00:00
Mozilla Thunderbird Multiple Vulnerability July-08 (Linux)
2008-10-07 00:00:00
nessus
nessus
Fedora 9 : thunderbird-2.0.0.16-1.fc9 (2008-6737)
2008-08-08 00:00:00
Fedora 8 : thunderbird-2.0.0.16-1.fc8 (2008-6706)
2008-08-08 00:00:00
Slackware 10.2 / 11.0 / 12.0 / 12.1 / current : mozilla-thunderbird (SSA:2008-210-05)
2008-07-29 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: thunderbird-2.0.0.16-1.fc8
2008-08-07 23:56:32
[SECURITY] Fedora 9 Update: thunderbird-2.0.0.16-1.fc9
2008-08-07 23:54:31
[SECURITY] Fedora 8 Update: epiphany-2.20.3-5.fc8
2008-07-06 06:14:11
ubuntu
ubuntu
Thunderbird vulnerabilities
2008-07-25 00:00:00
Firefox vulnerabilities
2008-07-02 00:00:00
osv
osv
icedove - several vulnerabilities
2008-07-27 00:00:00
iceweasel - several vulnerabilities
2008-07-11 00:00:00
xulrunner - several vulnerabilities
2008-07-23 00:00:00
debian
debian
[SECURITY] [DSA 1621-1] New icedove packages fix several vulnerabilities
2008-07-27 21:38:47
[SECURITY] [DSA 1607-1] New iceweasel packages fix several vulnerabilities
2008-07-11 16:11:41
[SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities
2008-07-23 20:33:58
centos
centos
seamonkey security update
2008-07-02 19:43:27
firefox security update
2008-07-02 19:45:20
seamonkey security update
2008-07-03 00:05:00
oraclelinux
oraclelinux
seamonkey security update
2008-07-02 00:00:00
firefox security update
2008-07-02 00:00:00
firefox security update
2008-07-02 00:00:00
redhat
redhat
(RHSA-2008:0569) Critical: firefox security update
2008-07-02 00:00:00
(RHSA-2008:0549) Critical: firefox security update
2008-07-02 00:00:00
(RHSA-2008:0547) Critical: seamonkey security update
2008-07-02 00:00:00
suse
suse
remote code execution in MozillaFirefox
2008-07-11 13:26:28
seebug
seebug
Mozilla Firefox 2.0.0.14存在多个远程漏洞
2008-07-03 00:00:00
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2008-08-06 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.435

Percentile

97.4%

JSON
Related for CVE-2008-2811
ubuntucve1cert1nvd1securityvulns2prion1cvelist1veracode1mozilla1openvas105nessus39fedora20ubuntu2osv4debian4centos5oraclelinux4redhat4suse1seebug1gentoo1