CVE-2008-5018

Опубликовано: 13 нояб. 2008

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient class checking" in the Date class.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
Third Party Advisory
http://secunia.com/advisories/32684
Third Party Advisory
http://secunia.com/advisories/32693
Third Party Advisory
http://secunia.com/advisories/32694
Third Party Advisory
http://secunia.com/advisories/32695
Third Party Advisory
http://secunia.com/advisories/32713
Third Party Advisory
http://secunia.com/advisories/32714
Third Party Advisory
http://secunia.com/advisories/32715
Third Party Advisory
http://secunia.com/advisories/32721
Third Party Advisory
http://secunia.com/advisories/32778
Third Party Advisory
http://secunia.com/advisories/32798
Third Party Advisory
http://secunia.com/advisories/32845
Third Party Advisory
http://secunia.com/advisories/32853
Third Party Advisory
http://secunia.com/advisories/33434
Third Party Advisory
http://secunia.com/advisories/34501
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Broken Link
http://ubuntu.com/usn/usn-667-1
Third Party Advisory
http://www.debian.org/security/2008/dsa-1669
Third Party Advisory
http://www.debian.org/security/2008/dsa-1671
Third Party Advisory
http://www.debian.org/security/2009/dsa-1696
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.18 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 3.0 (включая) до 3.0.4 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия от 1.0 (включая) до 1.1.13 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.18 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12478

Средний

10 Critical

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2008-5018

ubuntu

больше 16 лет назад

CVE-2008-5018

redhat

больше 16 лет назад

CVE-2008-5018

debian

больше 16 лет назад

The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x ...

GHSA-ww2m-xjhr-w96h

github

около 3 лет назад

ELSA-2008-0978

oracle-oval

больше 16 лет назад

ELSA-2008-0978: firefox security update (CRITICAL)

EPSS

Процентиль: 94%

0.12478

Средний

10 Critical

CVSS2

Дефекты

CWE-399