CVE-2008-0592

Mozilla text file mishandling

Published Feb 8, 2008 CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Description
Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1484-1 New xulrunner packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1485-1 New icedove packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1485-2 New icedove packages fix regression
Debian DSA Debian DSA DSA-1489-1 New iceweasel packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1506-1 New iceape packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1506-2 New iceape packages fix regression
EUVD EUVD EUVD-2008-0602 Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.
Ubuntu USN Ubuntu USN USN-576-1 Firefox vulnerabilities
References
Link Providers
http://browser.netscape.com/releasenotes/ cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html cve-icon cve-icon
http://secunia.com/advisories/28754 cve-icon cve-icon
http://secunia.com/advisories/28818 cve-icon cve-icon
http://secunia.com/advisories/28864 cve-icon cve-icon
http://secunia.com/advisories/28865 cve-icon cve-icon
http://secunia.com/advisories/28877 cve-icon cve-icon
http://secunia.com/advisories/28879 cve-icon cve-icon
http://secunia.com/advisories/28924 cve-icon cve-icon
http://secunia.com/advisories/28939 cve-icon cve-icon
http://secunia.com/advisories/28958 cve-icon cve-icon
http://secunia.com/advisories/29086 cve-icon cve-icon
http://secunia.com/advisories/29167 cve-icon cve-icon
http://secunia.com/advisories/29567 cve-icon cve-icon
http://secunia.com/advisories/30327 cve-icon cve-icon
http://secunia.com/advisories/30620 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 cve-icon cve-icon
http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html cve-icon cve-icon
http://wiki.rpath.com/Advisories:rPSA-2008-0051 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1484 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1485 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1489 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1506 cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 cve-icon cve-icon
http://www.mozilla.org/security/announce/2008/mfsa2008-09.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0103.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0104.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0105.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/487826/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/488002/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/27683 cve-icon cve-icon
http://www.securitytracker.com/id?1019340 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-576-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0453/references cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0627/references cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/1793/references cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=387258 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2008-0592 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9972 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2008-0592 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 7:54 AM
Reserved
Feb 5, 2008, 12:00 AM
Status
Modified
Published
Feb 9, 2008, 12:00 AM
Modified
Jun 16, 2026, 10:49 PM
Severity
Low
Public date
Feb 7, 2008, 12:00 AM