CVE-2008-5013

Mozilla Flash Player dynamic module unloading flaw

Published Nov 13, 2008 CVSS 2.0 · 9.3 Critical EPSS 4.8% KEV · Not listed
Description
Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1669-1 New xulrunner packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1671-1 New iceweasel packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1697-1 New iceape packages fix several vulnerabilities
Ubuntu USN Ubuntu USN USN-667-1 Firefox and xulrunner vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 10:40 AM
Reserved
Nov 10, 2008, 12:00 AM
Status
Modified
Published
Nov 13, 2008, 11:30 AM
Modified
Jun 16, 2026, 10:58 PM
Severity
Critical
Public date
Nov 12, 2008, 12:00 AM