CVE-2008-5021 PUBLISHED

Reported by redhat · Published November 13, 2008

nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a

Timeline

References

…and 18 more

Open in Interactive Console →