VDB
CVE-2008-5052
CVE-2008-5052
PUBLISHED
Reported by redhat · Published November 13, 2008
The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Nov 13, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Nov 2, 2023 EPSS Score
References
- ADV-2008-3146 vdb-entryx_refsource_VUPEN
- oval:org.mitre.oval:def:9449 vdb-entrysignaturex_refsource_OVAL
- 32281 vdb-entryx_refsource_BID
- x_refsource_MISC
- x_refsource_CONFIRM
- SUSE-SA:2008:055 vendor-advisoryx_refsource_SUSE
- TA08-319A third-party-advisoryx_refsource_CERT
- 1021183 vdb-entryx_refsource_SECTRACK
- MDVSA-2008:228 vendor-advisoryx_refsource_MANDRIVA
- MDVSA-2008:235 vendor-advisoryx_refsource_MANDRIVA