CVE-2008-5508

Опубликовано: 17 дек. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

Ссылки

http://secunia.com/advisories/33184
Third Party Advisory
http://secunia.com/advisories/33188
Third Party Advisory
http://secunia.com/advisories/33189
Third Party Advisory
http://secunia.com/advisories/33203
Third Party Advisory
http://secunia.com/advisories/33204
Third Party Advisory
http://secunia.com/advisories/33205
Third Party Advisory
http://secunia.com/advisories/33216
Third Party Advisory
http://secunia.com/advisories/33231
Third Party Advisory
http://secunia.com/advisories/33408
Third Party Advisory
http://secunia.com/advisories/33415
Third Party Advisory
http://secunia.com/advisories/33421
Third Party Advisory
http://secunia.com/advisories/33433
Third Party Advisory
http://secunia.com/advisories/33434
Third Party Advisory
http://secunia.com/advisories/33523
Third Party Advisory
http://secunia.com/advisories/33547
Third Party Advisory
http://secunia.com/advisories/34501
Third Party Advisory
http://secunia.com/advisories/35080
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1
Broken Link
http://www.debian.org/security/2009/dsa-1696
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.19 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 3.0 (включая) до 3.0.5 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия от 1.0 (включая) до 1.1.14 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.19 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02217

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2008-5508

ubuntu

больше 16 лет назад

CVE-2008-5508

redhat

больше 16 лет назад

CVE-2008-5508

debian

больше 16 лет назад

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird ...

GHSA-ggjv-5q8p-39gf

github

около 3 лет назад

ELSA-2008-1036

oracle-oval

больше 16 лет назад

ELSA-2008-1036: firefox security update (CRITICAL)

EPSS

Процентиль: 84%

0.02217

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20