CVE-2008-5016

Mozilla crash with evidence of memory corruption

Published Nov 13, 2008 CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Description
The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-667-1 Firefox and xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-668-1 Thunderbird vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html cve-icon cve-icon
http://secunia.com/advisories/32684 cve-icon cve-icon
http://secunia.com/advisories/32694 cve-icon cve-icon
http://secunia.com/advisories/32695 cve-icon cve-icon
http://secunia.com/advisories/32713 cve-icon cve-icon
http://secunia.com/advisories/32721 cve-icon cve-icon
http://secunia.com/advisories/32778 cve-icon cve-icon
http://secunia.com/advisories/32798 cve-icon cve-icon
http://secunia.com/advisories/34501 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 cve-icon cve-icon
http://ubuntu.com/usn/usn-667-1 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:230 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:235 cve-icon cve-icon
http://www.mozilla.org/security/announce/2008/mfsa2008-52.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0976.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0977.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0978.html cve-icon cve-icon
http://www.securityfocus.com/bid/32281 cve-icon cve-icon
http://www.securitytracker.com/id?1021183 cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA08-319A.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/3146 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/0977 cve-icon cve-icon
https://bugzilla.mozilla.org/buglist.cgi?bug_id=439206%2C453406%2C458637%2C444864%2C452157%2C449111%2C444260%2C457375%2C433429%2C443528%2C430394 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2008-5016 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11356 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2008-5016 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 10:40 AM
Reserved
Nov 10, 2008, 12:00 AM
Status
Modified
Published
Nov 13, 2008, 11:30 AM
Modified
Jun 16, 2026, 10:58 PM
Severity
Critical
Public date
Nov 12, 2008, 12:00 AM