Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2008-5508

Опубликовано: 17 дек. 2008
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3

Описание

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

РелизСтатусПримечание
dapper

released

1.5.dfsg+1.5.0.15~prepatch080614i-0ubuntu1
devel

released

3.0.5+nobinonly-0ubuntu0.8.04.1
gutsy

released

2.0.0.19+nobinonly1-0ubuntu0.7.10.1
hardy

released

2.0.0.19+nobinonly1-0ubuntu0.8.04.1
intrepid

DNE

jaunty

DNE

karmic

DNE

lucid

released

3.0.5+nobinonly-0ubuntu0.8.04.1
maverick

released

3.0.5+nobinonly-0ubuntu0.8.04.1
natty

released

3.0.5+nobinonly-0ubuntu0.8.04.1

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

gutsy

ignored

end of life, was needed
hardy

released

3.0.5+nobinonly-0ubuntu0.8.04.1
intrepid

released

3.0.5+nobinonly-0ubuntu0.8.10.1
jaunty

released

3.0.5+nobinonly-0ubuntu1
karmic

DNE

lucid

DNE

maverick

DNE

natty

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

gutsy

ignored

end of life, was needed
hardy

DNE

intrepid

DNE

jaunty

DNE

karmic

DNE

lucid

DNE

maverick

DNE

natty

DNE

Показывать по

РелизСтатусПримечание
dapper

released

1.5.0.13+1.5.0.15~prepatch080614i-0ubuntu0.6.06.1
devel

DNE

gutsy

DNE

hardy

DNE

intrepid

DNE

jaunty

DNE

karmic

DNE

lucid

DNE

maverick

DNE

natty

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

released

1.1.15+nobinonly-0ubuntu2
gutsy

DNE

hardy

released

1.1.15+nobinonly-0ubuntu0.8.04.2
intrepid

released

1.1.15+nobinonly-0ubuntu0.8.10.2
jaunty

released

1.1.15+nobinonly-0ubuntu2
karmic

released

1.1.15+nobinonly-0ubuntu2
lucid

released

1.1.15+nobinonly-0ubuntu2
maverick

released

1.1.15+nobinonly-0ubuntu2
natty

released

1.1.15+nobinonly-0ubuntu2

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

released

2.0.0.19+nobinonly-0ubuntu1
gutsy

released

2.0.0.19+nobinonly-0ubuntu0.7.10.1
hardy

released

2.0.0.19+nobinonly-0ubuntu0.8.04.1
intrepid

released

2.0.0.19+nobinonly-0ubuntu0.8.10.1
jaunty

released

2.0.0.19+nobinonly-0ubuntu1
karmic

released

2.0.0.19+nobinonly-0ubuntu1
lucid

released

2.0.0.19+nobinonly-0ubuntu1
maverick

released

2.0.0.19+nobinonly-0ubuntu1
natty

released

2.0.0.19+nobinonly-0ubuntu1

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

gutsy

released

1.8.1.18+nobinonly.b308.cvs20090331t155113-0ubuntu0.7.10.1
hardy

released

1.8.1.18+nobinonly.b308.cvs20090331t155113-0ubuntu0.8.04.1
intrepid

released

1.8.1.18+nobinonly.b308.cvs20090331t155113-0ubuntu0.8.10.1
jaunty

ignored

end of life
karmic

ignored

end of life
lucid

DNE

maverick

DNE

natty

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

gutsy

ignored

end of life, was needed
hardy

released

1.9.0.5+nobinonly-0ubuntu0.8.04.1
intrepid

released

1.9.0.5+nobinonly-0ubuntu0.8.10.1
jaunty

released

1.9.0.5+nobinonly-0ubuntu1
karmic

DNE

lucid

DNE

maverick

DNE

natty

DNE

Показывать по

EPSS

Процентиль: 84%
0.02217
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

redhat
больше 16 лет назад

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

nvd
больше 16 лет назад

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

debian
больше 16 лет назад

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird ...

github
около 3 лет назад

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

oracle-oval
больше 16 лет назад

ELSA-2008-1036: firefox security update (CRITICAL)

EPSS

Процентиль: 84%
0.02217
Низкий

4.3 Medium

CVSS2