csaf_redhat - rhsa-2008

rhsa-2008_0105

Vulnerability from csaf_redhat

Published

2008-02-08 02:13

Modified

2024-11-05 16:52

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. [Updated 27th February 2008] The erratum text has been updated to include the details of additional issues that were fixed by these erratum packages, but which were not public at the time of release. No changes have been made to the packages.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. A heap-based buffer overflow flaw was found in the way Thunderbird processed messages with external-body Multipurpose Internet Message Extensions (MIME) types. A HTML mail message containing malicious content could cause Thunderbird to execute arbitrary code as the user running Thunderbird. (CVE-2008-0304) Several flaws were found in the way Thunderbird processed certain malformed HTML mail content. A HTML mail message containing malicious content could cause Thunderbird to crash, or potentially execute arbitrary code as the user running Thunderbird. (CVE-2008-0412, CVE-2008-0413, CVE-2008-0415, CVE-2008-0419) Several flaws were found in the way Thunderbird displayed malformed HTML mail content. A HTML mail message containing specially-crafted content could trick a user into surrendering sensitive information. (CVE-2008-0420, CVE-2008-0591, CVE-2008-0593) A flaw was found in the way Thunderbird handles certain chrome URLs. If a user has certain extensions installed, it could allow a malicious HTML mail message to steal sensitive session data. Note: this flaw does not affect a default installation of Thunderbird. (CVE-2008-0418) Note: JavaScript support is disabled by default in Thunderbird; the above issues are not exploitable unless JavaScript is enabled. A flaw was found in the way Thunderbird saves certain text files. If a remote site offers a file of type "plain/text", rather than "text/plain", Thunderbird will not show future "text/plain" content to the user, forcing them to save those files locally to view the content. (CVE-2008-0592) Users of thunderbird are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated thunderbird packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4 and 5.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.\n\n[Updated 27th February 2008]\nThe erratum text has been updated to include the details of additional\nissues that were fixed by these erratum packages, but which were not public\nat the time of release. No changes have been made to the packages.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nA heap-based buffer overflow flaw was found in the way Thunderbird\nprocessed messages with external-body Multipurpose Internet Message\nExtensions (MIME) types. A HTML mail message containing malicious content\ncould cause Thunderbird to execute arbitrary code as the user running\nThunderbird. (CVE-2008-0304)\n\nSeveral flaws were found in the way Thunderbird processed certain malformed\nHTML mail content. A HTML mail message containing malicious content could\ncause Thunderbird to crash, or potentially execute arbitrary code as the\nuser running Thunderbird. (CVE-2008-0412, CVE-2008-0413, CVE-2008-0415,\nCVE-2008-0419)\n\nSeveral flaws were found in the way Thunderbird displayed malformed HTML\nmail content. A HTML mail message containing specially-crafted content\ncould trick a user into surrendering sensitive information. (CVE-2008-0420,\nCVE-2008-0591, CVE-2008-0593)\n\nA flaw was found in the way Thunderbird handles certain chrome URLs. If a\nuser has certain extensions installed, it could allow a malicious HTML mail\nmessage to steal sensitive session data. Note: this flaw does not affect a\ndefault installation of Thunderbird. (CVE-2008-0418)\n\nNote: JavaScript support is disabled by default in Thunderbird; the above\nissues are not exploitable unless JavaScript is enabled.\n\nA flaw was found in the way Thunderbird saves certain text files. If a\nremote site offers a file of type \"plain/text\", rather than \"text/plain\",\nThunderbird will not show future \"text/plain\" content to the user, forcing\nthem to save those files locally to view the content. (CVE-2008-0592)\n\nUsers of thunderbird are advised to upgrade to these updated packages,\nwhich contain backported patches to resolve these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0105",
        "url": "https://access.redhat.com/errata/RHSA-2008:0105"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "431732",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431732"
      },
      {
        "category": "external",
        "summary": "431733",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431733"
      },
      {
        "category": "external",
        "summary": "431739",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431739"
      },
      {
        "category": "external",
        "summary": "431748",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431748"
      },
      {
        "category": "external",
        "summary": "431749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431749"
      },
      {
        "category": "external",
        "summary": "431751",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431751"
      },
      {
        "category": "external",
        "summary": "431752",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431752"
      },
      {
        "category": "external",
        "summary": "431756",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431756"
      },
      {
        "category": "external",
        "summary": "435123",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=435123"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0105.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-05T16:52:12+00:00",
      "generator": {
        "date": "2024-11-05T16:52:12+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2008:0105",
      "initial_release_date": "2008-02-08T02:13:00+00:00",
      "revision_history": [
        {
          "date": "2008-02-08T02:13:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-02-27T16:44:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T16:52:12+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
                  "product_id": "5Server-DPAS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_productivity:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el4.ia64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el4.ia64",
                  "product_id": "thunderbird-0:1.5.0.12-8.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-8.el4?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el4.src",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el4.src",
                  "product_id": "thunderbird-0:1.5.0.12-8.el4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el4?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el5.src",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el5.src",
                  "product_id": "thunderbird-0:1.5.0.12-8.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el4.x86_64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el4.x86_64",
                  "product_id": "thunderbird-0:1.5.0.12-8.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-8.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el5.x86_64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el5.x86_64",
                  "product_id": "thunderbird-0:1.5.0.12-8.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-8.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el4.i386",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el4.i386",
                  "product_id": "thunderbird-0:1.5.0.12-8.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-8.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el5.i386",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el5.i386",
                  "product_id": "thunderbird-0:1.5.0.12-8.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-8.el5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el4.ppc",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el4.ppc",
                  "product_id": "thunderbird-0:1.5.0.12-8.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-8.el4?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el4.s390x",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el4.s390x",
                  "product_id": "thunderbird-0:1.5.0.12-8.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-8.el4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-8.el4.s390",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-8.el4.s390",
                  "product_id": "thunderbird-0:1.5.0.12-8.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-8.el4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-8.el4?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-8.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-8.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-8.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-8.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-8.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-8.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-8.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-8.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-8.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-8.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-8.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-8.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-8.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-8.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-8.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-8.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-8.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-8.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-8.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-0:1.5.0.12-8.el5.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-0:1.5.0.12-8.el5.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el5.i386 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el5.i386",
        "relates_to_product_reference": "5Server-DPAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el5.src as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el5.src",
        "relates_to_product_reference": "5Server-DPAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-8.el5.x86_64 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-8.el5.x86_64",
        "relates_to_product_reference": "5Server-DPAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el5.i386 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
        "relates_to_product_reference": "5Server-DPAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
        "relates_to_product_reference": "5Server-DPAS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-0304",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "435123"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thunderbird/seamonkey: MIME External-Body Heap Overflow Vulnerability",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0304"
        },
        {
          "category": "external",
          "summary": "RHBZ#435123",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=435123"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0304",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0304"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0304",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0304"
        }
      ],
      "release_date": "2008-02-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "thunderbird/seamonkey: MIME External-Body Heap Overflow Vulnerability"
    },
    {
      "cve": "CVE-2008-0412",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431732"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla layout engine crashes",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0412"
        },
        {
          "category": "external",
          "summary": "RHBZ#431732",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431732"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0412",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0412"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0412",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0412"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla layout engine crashes"
    },
    {
      "cve": "CVE-2008-0413",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431733"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla javascript engine crashes",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0413"
        },
        {
          "category": "external",
          "summary": "RHBZ#431733",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431733"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0413",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0413"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0413",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0413"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla javascript engine crashes"
    },
    {
      "cve": "CVE-2008-0415",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431739"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka \"JavaScript privilege escalation bugs.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla arbitrary code execution",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0415"
        },
        {
          "category": "external",
          "summary": "RHBZ#431739",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431739"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0415",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0415"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0415",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0415"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla arbitrary code execution"
    },
    {
      "cve": "CVE-2008-0418",
      "discovery_date": "2008-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431748"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using \"flat\" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chrome: directory traversal",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0418"
        },
        {
          "category": "external",
          "summary": "RHBZ#431748",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431748"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0418",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0418"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0418",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0418"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chrome: directory traversal"
    },
    {
      "cve": "CVE-2008-0419",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla arbitrary code execution",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0419"
        },
        {
          "category": "external",
          "summary": "RHBZ#431749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0419"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla arbitrary code execution"
    },
    {
      "cve": "CVE-2008-0420",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431750"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla information disclosure flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0420"
        },
        {
          "category": "external",
          "summary": "RHBZ#431750",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431750"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0420"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla information disclosure flaw"
    },
    {
      "cve": "CVE-2008-0591",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431751"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the \"dialog refocus bug\" or \"ffclick2\".",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla information disclosure flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0591"
        },
        {
          "category": "external",
          "summary": "RHBZ#431751",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431751"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0591",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0591"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0591",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0591"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla information disclosure flaw"
    },
    {
      "cve": "CVE-2008-0592",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431752"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a \"Content-Disposition: attachment\" and an invalid \"Content-Type: plain/text,\" which prevents Firefox from rendering future plain text files within the browser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla text file mishandling",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0592"
        },
        {
          "category": "external",
          "summary": "RHBZ#431752",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431752"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0592",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0592"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0592",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0592"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Mozilla text file mishandling"
    },
    {
      "cve": "CVE-2008-0593",
      "discovery_date": "2008-01-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "431756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla URL token stealing flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-8.el4.src",
          "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-8.el4.src",
          "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-8.el4.src",
          "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
          "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-0:1.5.0.12-8.el5.src",
          "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
          "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0593"
        },
        {
          "category": "external",
          "summary": "RHBZ#431756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=431756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0593",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0593"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0593",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0593"
        }
      ],
      "release_date": "2008-02-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-02-08T02:13:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-8.el4.src",
            "4AS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-8.el4.src",
            "4ES:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-8.el4.src",
            "4WS:thunderbird-0:1.5.0.12-8.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-8.el4.x86_64",
            "5Client:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-0:1.5.0.12-8.el5.src",
            "5Client:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Client:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.src",
            "5Server-DPAS:thunderbird-0:1.5.0.12-8.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:1.5.0.12-8.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0105"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Mozilla URL token stealing flaw"
    }
  ]
}

cve-2008-0418

Vulnerability from cvelistv5

Published

2008-02-08 21:00

Modified

2024-08-07 07:46

Severity ?

Summary

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2008-0104.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-582-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1019329	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/usn-576-1	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	http://secunia.com/advisories/28939	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1506	vendor-advisory, x_refsource_DEBIAN
	http://www.kb.cert.org/vuls/id/309608	third-party-advisory, x_refsource_CERT-VN
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-1995	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://secunia.com/advisories/28766	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28622/	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28818	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28865	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29049	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0453/references	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-0103.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28877	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28879	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-582-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29567	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0105.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28958	third-party-advisory, x_refsource_SECUNIA
	http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html	x_refsource_CONFIRM
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/archive/1/488971/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2008/dsa-1489	vendor-advisory, x_refsource_DEBIAN
	http://www.mozilla.org/security/announce/2008/mfsa2008-05.html	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/488002/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/487826/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/29086	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28815	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0454/references	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/28864	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1485	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28924	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	http://wiki.rpath.com/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2008/2091/references	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/29164	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29211	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2008-0051	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:062	vendor-advisory, x_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1484	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28808	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0263	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/28754	third-party-advisory, x_refsource_SECUNIA
	http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/	x_refsource_MISC
	http://www.securityfocus.com/bid/27406	vdb-entry, x_refsource_BID
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/31043	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29098	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28839	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:46:54.336Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
          },
          {
            "name": "USN-582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-2"
          },
          {
            "name": "1019329",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019329"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-576-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "name": "28939",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28939"
          },
          {
            "name": "DSA-1506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1506"
          },
          {
            "name": "VU#309608",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/309608"
          },
          {
            "name": "SSA:2008-061-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1995"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
          },
          {
            "name": "28766",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28766"
          },
          {
            "name": "28622",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28622/"
          },
          {
            "name": "28818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28818"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "28865",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28865"
          },
          {
            "name": "29049",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29049"
          },
          {
            "name": "ADV-2008-0453",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0453/references"
          },
          {
            "name": "RHSA-2008:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
          },
          {
            "name": "28877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28877"
          },
          {
            "name": "28879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28879"
          },
          {
            "name": "USN-582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-1"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "29567",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29567"
          },
          {
            "name": "RHSA-2008:0105",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
          },
          {
            "name": "28958",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28958"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "name": "20080229 rPSA-2008-0093-1 thunderbird",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
          },
          {
            "name": "DSA-1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1489"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-05.html"
          },
          {
            "name": "20080212 FLEA-2008-0001-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
          },
          {
            "name": "20080209 rPSA-2008-0051-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
          },
          {
            "name": "29086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29086"
          },
          {
            "name": "28815",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28815"
          },
          {
            "name": "ADV-2008-0454",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0454/references"
          },
          {
            "name": "239546",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
          },
          {
            "name": "28864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28864"
          },
          {
            "name": "DSA-1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1485"
          },
          {
            "name": "28924",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28924"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
          },
          {
            "name": "ADV-2008-2091",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2091/references"
          },
          {
            "name": "SUSE-SA:2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
          },
          {
            "name": "FEDORA-2008-1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
          },
          {
            "name": "29164",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29164"
          },
          {
            "name": "29211",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29211"
          },
          {
            "name": "FEDORA-2008-1535",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
          },
          {
            "name": "MDVSA-2008:062",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
          },
          {
            "name": "DSA-1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1484"
          },
          {
            "name": "28808",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28808"
          },
          {
            "name": "ADV-2008-0263",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0263"
          },
          {
            "name": "oval:org.mitre.oval:def:10705",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "28754",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28754"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/"
          },
          {
            "name": "27406",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27406"
          },
          {
            "name": "FEDORA-2008-1435",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          },
          {
            "name": "31043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31043"
          },
          {
            "name": "29098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29098"
          },
          {
            "name": "28839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28839"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using \"flat\" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
        },
        {
          "name": "USN-582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-2"
        },
        {
          "name": "1019329",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019329"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-576-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "name": "28939",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28939"
        },
        {
          "name": "DSA-1506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1506"
        },
        {
          "name": "VU#309608",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/309608"
        },
        {
          "name": "SSA:2008-061-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1995"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
        },
        {
          "name": "28766",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28766"
        },
        {
          "name": "28622",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28622/"
        },
        {
          "name": "28818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28818"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "28865",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28865"
        },
        {
          "name": "29049",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29049"
        },
        {
          "name": "ADV-2008-0453",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0453/references"
        },
        {
          "name": "RHSA-2008:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
        },
        {
          "name": "28877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28877"
        },
        {
          "name": "28879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28879"
        },
        {
          "name": "USN-582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-1"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "29567",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29567"
        },
        {
          "name": "RHSA-2008:0105",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
        },
        {
          "name": "28958",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28958"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "name": "20080229 rPSA-2008-0093-1 thunderbird",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
        },
        {
          "name": "DSA-1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1489"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-05.html"
        },
        {
          "name": "20080212 FLEA-2008-0001-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
        },
        {
          "name": "20080209 rPSA-2008-0051-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
        },
        {
          "name": "29086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29086"
        },
        {
          "name": "28815",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28815"
        },
        {
          "name": "ADV-2008-0454",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0454/references"
        },
        {
          "name": "239546",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
        },
        {
          "name": "28864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28864"
        },
        {
          "name": "DSA-1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1485"
        },
        {
          "name": "28924",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28924"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
        },
        {
          "name": "ADV-2008-2091",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2091/references"
        },
        {
          "name": "SUSE-SA:2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
        },
        {
          "name": "FEDORA-2008-1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
        },
        {
          "name": "29164",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29164"
        },
        {
          "name": "29211",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29211"
        },
        {
          "name": "FEDORA-2008-1535",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
        },
        {
          "name": "MDVSA-2008:062",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
        },
        {
          "name": "DSA-1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1484"
        },
        {
          "name": "28808",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28808"
        },
        {
          "name": "ADV-2008-0263",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0263"
        },
        {
          "name": "oval:org.mitre.oval:def:10705",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "28754",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28754"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/"
        },
        {
          "name": "27406",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27406"
        },
        {
          "name": "FEDORA-2008-1435",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        },
        {
          "name": "31043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31043"
        },
        {
          "name": "29098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29098"
        },
        {
          "name": "28839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28839"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0418",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using \"flat\" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2008:0104",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
            },
            {
              "name": "USN-582-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-2"
            },
            {
              "name": "1019329",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019329"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-576-1"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "28939",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28939"
            },
            {
              "name": "DSA-1506",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1506"
            },
            {
              "name": "VU#309608",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/309608"
            },
            {
              "name": "SSA:2008-061-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1995",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1995"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
            },
            {
              "name": "28766",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28766"
            },
            {
              "name": "28622",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28622/"
            },
            {
              "name": "28818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28818"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "28865",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28865"
            },
            {
              "name": "29049",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29049"
            },
            {
              "name": "ADV-2008-0453",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0453/references"
            },
            {
              "name": "RHSA-2008:0103",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
            },
            {
              "name": "28877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28877"
            },
            {
              "name": "28879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28879"
            },
            {
              "name": "USN-582-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-1"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "29567",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29567"
            },
            {
              "name": "RHSA-2008:0105",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
            },
            {
              "name": "28958",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28958"
            },
            {
              "name": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html",
              "refsource": "CONFIRM",
              "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "20080229 rPSA-2008-0093-1 thunderbird",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
            },
            {
              "name": "DSA-1489",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1489"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-05.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-05.html"
            },
            {
              "name": "20080212 FLEA-2008-0001-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
            },
            {
              "name": "20080209 rPSA-2008-0051-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
            },
            {
              "name": "29086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29086"
            },
            {
              "name": "28815",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28815"
            },
            {
              "name": "ADV-2008-0454",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0454/references"
            },
            {
              "name": "239546",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
            },
            {
              "name": "28864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28864"
            },
            {
              "name": "DSA-1485",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1485"
            },
            {
              "name": "28924",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28924"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
            },
            {
              "name": "ADV-2008-2091",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2091/references"
            },
            {
              "name": "SUSE-SA:2008:008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
            },
            {
              "name": "FEDORA-2008-1459",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
            },
            {
              "name": "29164",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29164"
            },
            {
              "name": "29211",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29211"
            },
            {
              "name": "FEDORA-2008-1535",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0051",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
            },
            {
              "name": "MDVSA-2008:062",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
            },
            {
              "name": "DSA-1484",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1484"
            },
            {
              "name": "28808",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28808"
            },
            {
              "name": "ADV-2008-0263",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0263"
            },
            {
              "name": "oval:org.mitre.oval:def:10705",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "28754",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28754"
            },
            {
              "name": "http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/",
              "refsource": "MISC",
              "url": "http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/"
            },
            {
              "name": "27406",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27406"
            },
            {
              "name": "FEDORA-2008-1435",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            },
            {
              "name": "31043",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31043"
            },
            {
              "name": "29098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29098"
            },
            {
              "name": "28839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28839"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0418",
    "datePublished": "2008-02-08T21:00:00",
    "dateReserved": "2008-01-23T00:00:00",
    "dateUpdated": "2024-08-07T07:46:54.336Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0413

Vulnerability from cvelistv5

Published

2008-02-08 21:00

Modified

2024-08-07 07:46

Severity ?

Summary

The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2008-0104.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-582-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/usn-576-1	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	http://secunia.com/advisories/28939	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1506	vendor-advisory, x_refsource_DEBIAN
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-1995	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://secunia.com/advisories/28766	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28818	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28865	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29049	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0453/references	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-0103.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28877	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28879	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720%2C390597%2C373344%2C398085%2C406572%2C391028%2C406036%2C402087	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/usn-582-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0105.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28958	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/archive/1/488971/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2008/dsa-1489	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/archive/1/488002/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/487826/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/29086	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28815	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0454/references	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/28864	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1485	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28924	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/27683	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2008/mfsa2008-01.html	x_refsource_CONFIRM
	http://wiki.rpath.com/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2008/2091/references	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10385	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/29164	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29211	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2008-0051	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:062	vendor-advisory, x_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1484	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28808	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.securitytracker.com/id?1019321	vdb-entry, x_refsource_SECTRACK
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/28754	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28758	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/31043	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29098	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28839	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:46:54.646Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
          },
          {
            "name": "USN-582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-2"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-576-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "name": "28939",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28939"
          },
          {
            "name": "DSA-1506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1506"
          },
          {
            "name": "SSA:2008-061-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1995"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
          },
          {
            "name": "28766",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28766"
          },
          {
            "name": "28818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28818"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "28865",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28865"
          },
          {
            "name": "29049",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29049"
          },
          {
            "name": "ADV-2008-0453",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0453/references"
          },
          {
            "name": "RHSA-2008:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
          },
          {
            "name": "28877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28877"
          },
          {
            "name": "28879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28879"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720%2C390597%2C373344%2C398085%2C406572%2C391028%2C406036%2C402087"
          },
          {
            "name": "USN-582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-1"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "RHSA-2008:0105",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
          },
          {
            "name": "28958",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28958"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "name": "20080229 rPSA-2008-0093-1 thunderbird",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
          },
          {
            "name": "DSA-1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1489"
          },
          {
            "name": "20080212 FLEA-2008-0001-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
          },
          {
            "name": "20080209 rPSA-2008-0051-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
          },
          {
            "name": "29086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29086"
          },
          {
            "name": "28815",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28815"
          },
          {
            "name": "ADV-2008-0454",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0454/references"
          },
          {
            "name": "239546",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
          },
          {
            "name": "28864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28864"
          },
          {
            "name": "DSA-1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1485"
          },
          {
            "name": "28924",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28924"
          },
          {
            "name": "27683",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27683"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-01.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
          },
          {
            "name": "ADV-2008-2091",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2091/references"
          },
          {
            "name": "oval:org.mitre.oval:def:10385",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10385"
          },
          {
            "name": "SUSE-SA:2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
          },
          {
            "name": "FEDORA-2008-1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
          },
          {
            "name": "29164",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29164"
          },
          {
            "name": "29211",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29211"
          },
          {
            "name": "FEDORA-2008-1535",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
          },
          {
            "name": "MDVSA-2008:062",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
          },
          {
            "name": "DSA-1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1484"
          },
          {
            "name": "28808",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28808"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "1019321",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019321"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "28754",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28754"
          },
          {
            "name": "28758",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28758"
          },
          {
            "name": "FEDORA-2008-1435",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          },
          {
            "name": "31043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31043"
          },
          {
            "name": "29098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29098"
          },
          {
            "name": "28839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28839"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
        },
        {
          "name": "USN-582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-2"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-576-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "name": "28939",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28939"
        },
        {
          "name": "DSA-1506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1506"
        },
        {
          "name": "SSA:2008-061-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1995"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
        },
        {
          "name": "28766",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28766"
        },
        {
          "name": "28818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28818"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "28865",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28865"
        },
        {
          "name": "29049",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29049"
        },
        {
          "name": "ADV-2008-0453",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0453/references"
        },
        {
          "name": "RHSA-2008:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
        },
        {
          "name": "28877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28877"
        },
        {
          "name": "28879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28879"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720%2C390597%2C373344%2C398085%2C406572%2C391028%2C406036%2C402087"
        },
        {
          "name": "USN-582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-1"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "RHSA-2008:0105",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
        },
        {
          "name": "28958",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28958"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "name": "20080229 rPSA-2008-0093-1 thunderbird",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
        },
        {
          "name": "DSA-1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1489"
        },
        {
          "name": "20080212 FLEA-2008-0001-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
        },
        {
          "name": "20080209 rPSA-2008-0051-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
        },
        {
          "name": "29086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29086"
        },
        {
          "name": "28815",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28815"
        },
        {
          "name": "ADV-2008-0454",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0454/references"
        },
        {
          "name": "239546",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
        },
        {
          "name": "28864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28864"
        },
        {
          "name": "DSA-1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1485"
        },
        {
          "name": "28924",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28924"
        },
        {
          "name": "27683",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27683"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-01.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
        },
        {
          "name": "ADV-2008-2091",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2091/references"
        },
        {
          "name": "oval:org.mitre.oval:def:10385",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10385"
        },
        {
          "name": "SUSE-SA:2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
        },
        {
          "name": "FEDORA-2008-1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
        },
        {
          "name": "29164",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29164"
        },
        {
          "name": "29211",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29211"
        },
        {
          "name": "FEDORA-2008-1535",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
        },
        {
          "name": "MDVSA-2008:062",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
        },
        {
          "name": "DSA-1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1484"
        },
        {
          "name": "28808",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28808"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "1019321",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019321"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "28754",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28754"
        },
        {
          "name": "28758",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28758"
        },
        {
          "name": "FEDORA-2008-1435",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        },
        {
          "name": "31043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31043"
        },
        {
          "name": "29098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29098"
        },
        {
          "name": "28839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28839"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0413",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2008:0104",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
            },
            {
              "name": "USN-582-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-2"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-576-1"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "28939",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28939"
            },
            {
              "name": "DSA-1506",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1506"
            },
            {
              "name": "SSA:2008-061-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1995",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1995"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
            },
            {
              "name": "28766",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28766"
            },
            {
              "name": "28818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28818"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "28865",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28865"
            },
            {
              "name": "29049",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29049"
            },
            {
              "name": "ADV-2008-0453",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0453/references"
            },
            {
              "name": "RHSA-2008:0103",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
            },
            {
              "name": "28877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28877"
            },
            {
              "name": "28879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28879"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720,390597,373344,398085,406572,391028,406036,402087",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720,390597,373344,398085,406572,391028,406036,402087"
            },
            {
              "name": "USN-582-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-1"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "RHSA-2008:0105",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
            },
            {
              "name": "28958",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28958"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "20080229 rPSA-2008-0093-1 thunderbird",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
            },
            {
              "name": "DSA-1489",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1489"
            },
            {
              "name": "20080212 FLEA-2008-0001-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
            },
            {
              "name": "20080209 rPSA-2008-0051-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
            },
            {
              "name": "29086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29086"
            },
            {
              "name": "28815",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28815"
            },
            {
              "name": "ADV-2008-0454",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0454/references"
            },
            {
              "name": "239546",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
            },
            {
              "name": "28864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28864"
            },
            {
              "name": "DSA-1485",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1485"
            },
            {
              "name": "28924",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28924"
            },
            {
              "name": "27683",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27683"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-01.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-01.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
            },
            {
              "name": "ADV-2008-2091",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2091/references"
            },
            {
              "name": "oval:org.mitre.oval:def:10385",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10385"
            },
            {
              "name": "SUSE-SA:2008:008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
            },
            {
              "name": "FEDORA-2008-1459",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
            },
            {
              "name": "29164",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29164"
            },
            {
              "name": "29211",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29211"
            },
            {
              "name": "FEDORA-2008-1535",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0051",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
            },
            {
              "name": "MDVSA-2008:062",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
            },
            {
              "name": "DSA-1484",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1484"
            },
            {
              "name": "28808",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28808"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "1019321",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019321"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "28754",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28754"
            },
            {
              "name": "28758",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28758"
            },
            {
              "name": "FEDORA-2008-1435",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            },
            {
              "name": "31043",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31043"
            },
            {
              "name": "29098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29098"
            },
            {
              "name": "28839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28839"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0413",
    "datePublished": "2008-02-08T21:00:00",
    "dateReserved": "2008-01-23T00:00:00",
    "dateUpdated": "2024-08-07T07:46:54.646Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0420

Vulnerability from cvelistv5

Published

2008-02-12 02:00

Modified

2024-08-07 07:46

Severity ?

Summary

modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/usn-582-2	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/488264/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29049	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/40491	vdb-entry, x_refsource_XF
	http://www.ubuntu.com/usn/usn-582-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=408076	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2008/mfsa2008-07.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/27826	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/40606	vdb-entry, x_refsource_XF
	http://securitytracker.com/id?1019434	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/28758	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/29098	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28839	third-party-advisory, x_refsource_SECUNIA
	https://usn.ubuntu.com/576-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:46:54.461Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "name": "20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488264/100/0/threaded"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "29049",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29049"
          },
          {
            "name": "firefox-bmp-information-disclosure(40491)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40491"
          },
          {
            "name": "USN-582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-1"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=408076"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-07.html"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "name": "27826",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27826"
          },
          {
            "name": "firefox-bmp-dos(40606)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40606"
          },
          {
            "name": "1019434",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1019434"
          },
          {
            "name": "oval:org.mitre.oval:def:10119",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "28758",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28758"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          },
          {
            "name": "29098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29098"
          },
          {
            "name": "28839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28839"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/576-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "name": "20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488264/100/0/threaded"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "29049",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29049"
        },
        {
          "name": "firefox-bmp-information-disclosure(40491)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40491"
        },
        {
          "name": "USN-582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-1"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=408076"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-07.html"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "name": "27826",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27826"
        },
        {
          "name": "firefox-bmp-dos(40606)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40606"
        },
        {
          "name": "1019434",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1019434"
        },
        {
          "name": "oval:org.mitre.oval:def:10119",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "28758",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28758"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        },
        {
          "name": "29098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29098"
        },
        {
          "name": "28839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28839"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/576-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0420",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-582-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-2"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488264/100/0/threaded"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "29049",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29049"
            },
            {
              "name": "firefox-bmp-information-disclosure(40491)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40491"
            },
            {
              "name": "USN-582-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-1"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=408076",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=408076"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-07.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-07.html"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "27826",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27826"
            },
            {
              "name": "firefox-bmp-dos(40606)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40606"
            },
            {
              "name": "1019434",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1019434"
            },
            {
              "name": "oval:org.mitre.oval:def:10119",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "28758",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28758"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            },
            {
              "name": "29098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29098"
            },
            {
              "name": "28839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28839"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/576-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0420",
    "datePublished": "2008-02-12T02:00:00",
    "dateReserved": "2008-01-23T00:00:00",
    "dateUpdated": "2024-08-07T07:46:54.461Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0593

Vulnerability from cvelistv5

Published

2008-02-09 00:00

Modified

2024-08-07 07:54

Severity ?

Summary

Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2008-0104.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-576-1	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1019341	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/28939	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1506	vendor-advisory, x_refsource_DEBIAN
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=397427	x_refsource_CONFIRM
	http://secunia.com/advisories/28766	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28818	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28865	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29049	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0453/references	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-0103.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28877	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28879	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29567	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0105.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28958	third-party-advisory, x_refsource_SECUNIA
	http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html	x_refsource_CONFIRM
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	http://www.debian.org/security/2008/dsa-1489	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/archive/1/487826/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/29086	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28815	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28864	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1485	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28924	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/27683	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10075	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2008-0051	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1484	vendor-advisory, x_refsource_DEBIAN
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/28754	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28758	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA
	http://www.mozilla.org/security/announce/2008/mfsa2008-10.html	x_refsource_CONFIRM
	http://secunia.com/advisories/28839	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:54:22.189Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-576-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "name": "1019341",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019341"
          },
          {
            "name": "28939",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28939"
          },
          {
            "name": "DSA-1506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1506"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=397427"
          },
          {
            "name": "28766",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28766"
          },
          {
            "name": "28818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28818"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "28865",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28865"
          },
          {
            "name": "29049",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29049"
          },
          {
            "name": "ADV-2008-0453",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0453/references"
          },
          {
            "name": "RHSA-2008:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
          },
          {
            "name": "28877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28877"
          },
          {
            "name": "28879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28879"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "29567",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29567"
          },
          {
            "name": "RHSA-2008:0105",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
          },
          {
            "name": "28958",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28958"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "name": "DSA-1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1489"
          },
          {
            "name": "20080209 rPSA-2008-0051-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
          },
          {
            "name": "29086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29086"
          },
          {
            "name": "28815",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28815"
          },
          {
            "name": "28864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28864"
          },
          {
            "name": "DSA-1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1485"
          },
          {
            "name": "28924",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28924"
          },
          {
            "name": "27683",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27683"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "name": "oval:org.mitre.oval:def:10075",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10075"
          },
          {
            "name": "SUSE-SA:2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
          },
          {
            "name": "FEDORA-2008-1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
          },
          {
            "name": "FEDORA-2008-1535",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
          },
          {
            "name": "DSA-1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1484"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "28754",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28754"
          },
          {
            "name": "28758",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28758"
          },
          {
            "name": "FEDORA-2008-1435",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-10.html"
          },
          {
            "name": "28839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28839"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-576-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "name": "1019341",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019341"
        },
        {
          "name": "28939",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28939"
        },
        {
          "name": "DSA-1506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1506"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=397427"
        },
        {
          "name": "28766",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28766"
        },
        {
          "name": "28818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28818"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "28865",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28865"
        },
        {
          "name": "29049",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29049"
        },
        {
          "name": "ADV-2008-0453",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0453/references"
        },
        {
          "name": "RHSA-2008:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
        },
        {
          "name": "28877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28877"
        },
        {
          "name": "28879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28879"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "29567",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29567"
        },
        {
          "name": "RHSA-2008:0105",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
        },
        {
          "name": "28958",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28958"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "name": "DSA-1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1489"
        },
        {
          "name": "20080209 rPSA-2008-0051-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
        },
        {
          "name": "29086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29086"
        },
        {
          "name": "28815",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28815"
        },
        {
          "name": "28864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28864"
        },
        {
          "name": "DSA-1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1485"
        },
        {
          "name": "28924",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28924"
        },
        {
          "name": "27683",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27683"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "name": "oval:org.mitre.oval:def:10075",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10075"
        },
        {
          "name": "SUSE-SA:2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
        },
        {
          "name": "FEDORA-2008-1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
        },
        {
          "name": "FEDORA-2008-1535",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
        },
        {
          "name": "DSA-1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1484"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "28754",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28754"
        },
        {
          "name": "28758",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28758"
        },
        {
          "name": "FEDORA-2008-1435",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-10.html"
        },
        {
          "name": "28839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28839"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0593",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2008:0104",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-576-1"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "1019341",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019341"
            },
            {
              "name": "28939",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28939"
            },
            {
              "name": "DSA-1506",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1506"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=397427",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=397427"
            },
            {
              "name": "28766",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28766"
            },
            {
              "name": "28818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28818"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "28865",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28865"
            },
            {
              "name": "29049",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29049"
            },
            {
              "name": "ADV-2008-0453",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0453/references"
            },
            {
              "name": "RHSA-2008:0103",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
            },
            {
              "name": "28877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28877"
            },
            {
              "name": "28879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28879"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "29567",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29567"
            },
            {
              "name": "RHSA-2008:0105",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
            },
            {
              "name": "28958",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28958"
            },
            {
              "name": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html",
              "refsource": "CONFIRM",
              "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "DSA-1489",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1489"
            },
            {
              "name": "20080209 rPSA-2008-0051-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
            },
            {
              "name": "29086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29086"
            },
            {
              "name": "28815",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28815"
            },
            {
              "name": "28864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28864"
            },
            {
              "name": "DSA-1485",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1485"
            },
            {
              "name": "28924",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28924"
            },
            {
              "name": "27683",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27683"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "oval:org.mitre.oval:def:10075",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10075"
            },
            {
              "name": "SUSE-SA:2008:008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
            },
            {
              "name": "FEDORA-2008-1459",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
            },
            {
              "name": "FEDORA-2008-1535",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0051",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
            },
            {
              "name": "DSA-1484",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1484"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "28754",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28754"
            },
            {
              "name": "28758",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28758"
            },
            {
              "name": "FEDORA-2008-1435",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-10.html"
            },
            {
              "name": "28839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28839"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0593",
    "datePublished": "2008-02-09T00:00:00",
    "dateReserved": "2008-02-05T00:00:00",
    "dateUpdated": "2024-08-07T07:54:22.189Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0412

Vulnerability from cvelistv5

Published

2008-02-08 21:00

Modified

2024-08-07 07:46

Severity ?

Summary

The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2008-0104.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-582-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/usn-576-1	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	http://secunia.com/advisories/28939	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1506	vendor-advisory, x_refsource_DEBIAN
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-1995	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://secunia.com/advisories/28766	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28818	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28865	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29049	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0453/references	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-0103.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28877	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28879	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-582-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29567	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0105.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28958	third-party-advisory, x_refsource_SECUNIA
	http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html	x_refsource_CONFIRM
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/archive/1/488971/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2008/dsa-1489	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/archive/1/488002/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/487826/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/29086	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28815	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0454/references	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/28864	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1485	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28924	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/27683	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	http://www.securitytracker.com/id?1019320	vdb-entry, x_refsource_SECTRACK
	http://www.mozilla.org/security/announce/2008/mfsa2008-01.html	x_refsource_CONFIRM
	http://wiki.rpath.com/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2008/2091/references	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088%2C393141%2C364801%2C346405%2C396613%2C394337%2C406290	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/29164	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29211	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2008-0051	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:062	vendor-advisory, x_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1484	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28808	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10573	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/28754	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28758	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/31043	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29098	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28839	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:46:54.820Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
          },
          {
            "name": "USN-582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-2"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-576-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "name": "28939",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28939"
          },
          {
            "name": "DSA-1506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1506"
          },
          {
            "name": "SSA:2008-061-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1995"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
          },
          {
            "name": "28766",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28766"
          },
          {
            "name": "28818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28818"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "28865",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28865"
          },
          {
            "name": "29049",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29049"
          },
          {
            "name": "ADV-2008-0453",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0453/references"
          },
          {
            "name": "RHSA-2008:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
          },
          {
            "name": "28877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28877"
          },
          {
            "name": "28879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28879"
          },
          {
            "name": "USN-582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-1"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "29567",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29567"
          },
          {
            "name": "RHSA-2008:0105",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
          },
          {
            "name": "28958",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28958"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "name": "20080229 rPSA-2008-0093-1 thunderbird",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
          },
          {
            "name": "DSA-1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1489"
          },
          {
            "name": "20080212 FLEA-2008-0001-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
          },
          {
            "name": "20080209 rPSA-2008-0051-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
          },
          {
            "name": "29086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29086"
          },
          {
            "name": "28815",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28815"
          },
          {
            "name": "ADV-2008-0454",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0454/references"
          },
          {
            "name": "239546",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
          },
          {
            "name": "28864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28864"
          },
          {
            "name": "DSA-1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1485"
          },
          {
            "name": "28924",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28924"
          },
          {
            "name": "27683",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27683"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "name": "1019320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-01.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
          },
          {
            "name": "ADV-2008-2091",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2091/references"
          },
          {
            "name": "SUSE-SA:2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088%2C393141%2C364801%2C346405%2C396613%2C394337%2C406290"
          },
          {
            "name": "FEDORA-2008-1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
          },
          {
            "name": "29164",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29164"
          },
          {
            "name": "29211",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29211"
          },
          {
            "name": "FEDORA-2008-1535",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
          },
          {
            "name": "MDVSA-2008:062",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
          },
          {
            "name": "DSA-1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1484"
          },
          {
            "name": "28808",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28808"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:10573",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10573"
          },
          {
            "name": "28754",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28754"
          },
          {
            "name": "28758",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28758"
          },
          {
            "name": "FEDORA-2008-1435",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          },
          {
            "name": "31043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31043"
          },
          {
            "name": "29098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29098"
          },
          {
            "name": "28839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28839"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
        },
        {
          "name": "USN-582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-2"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-576-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "name": "28939",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28939"
        },
        {
          "name": "DSA-1506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1506"
        },
        {
          "name": "SSA:2008-061-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1995"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
        },
        {
          "name": "28766",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28766"
        },
        {
          "name": "28818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28818"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "28865",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28865"
        },
        {
          "name": "29049",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29049"
        },
        {
          "name": "ADV-2008-0453",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0453/references"
        },
        {
          "name": "RHSA-2008:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
        },
        {
          "name": "28877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28877"
        },
        {
          "name": "28879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28879"
        },
        {
          "name": "USN-582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-1"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "29567",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29567"
        },
        {
          "name": "RHSA-2008:0105",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
        },
        {
          "name": "28958",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28958"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "name": "20080229 rPSA-2008-0093-1 thunderbird",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
        },
        {
          "name": "DSA-1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1489"
        },
        {
          "name": "20080212 FLEA-2008-0001-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
        },
        {
          "name": "20080209 rPSA-2008-0051-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
        },
        {
          "name": "29086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29086"
        },
        {
          "name": "28815",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28815"
        },
        {
          "name": "ADV-2008-0454",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0454/references"
        },
        {
          "name": "239546",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
        },
        {
          "name": "28864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28864"
        },
        {
          "name": "DSA-1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1485"
        },
        {
          "name": "28924",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28924"
        },
        {
          "name": "27683",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27683"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "name": "1019320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-01.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
        },
        {
          "name": "ADV-2008-2091",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2091/references"
        },
        {
          "name": "SUSE-SA:2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088%2C393141%2C364801%2C346405%2C396613%2C394337%2C406290"
        },
        {
          "name": "FEDORA-2008-1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
        },
        {
          "name": "29164",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29164"
        },
        {
          "name": "29211",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29211"
        },
        {
          "name": "FEDORA-2008-1535",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
        },
        {
          "name": "MDVSA-2008:062",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
        },
        {
          "name": "DSA-1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1484"
        },
        {
          "name": "28808",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28808"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:10573",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10573"
        },
        {
          "name": "28754",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28754"
        },
        {
          "name": "28758",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28758"
        },
        {
          "name": "FEDORA-2008-1435",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        },
        {
          "name": "31043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31043"
        },
        {
          "name": "29098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29098"
        },
        {
          "name": "28839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28839"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0412",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2008:0104",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
            },
            {
              "name": "USN-582-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-2"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-576-1"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "28939",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28939"
            },
            {
              "name": "DSA-1506",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1506"
            },
            {
              "name": "SSA:2008-061-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1995",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1995"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
            },
            {
              "name": "28766",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28766"
            },
            {
              "name": "28818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28818"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "28865",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28865"
            },
            {
              "name": "29049",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29049"
            },
            {
              "name": "ADV-2008-0453",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0453/references"
            },
            {
              "name": "RHSA-2008:0103",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
            },
            {
              "name": "28877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28877"
            },
            {
              "name": "28879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28879"
            },
            {
              "name": "USN-582-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-1"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "29567",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29567"
            },
            {
              "name": "RHSA-2008:0105",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
            },
            {
              "name": "28958",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28958"
            },
            {
              "name": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html",
              "refsource": "CONFIRM",
              "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "20080229 rPSA-2008-0093-1 thunderbird",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
            },
            {
              "name": "DSA-1489",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1489"
            },
            {
              "name": "20080212 FLEA-2008-0001-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
            },
            {
              "name": "20080209 rPSA-2008-0051-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
            },
            {
              "name": "29086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29086"
            },
            {
              "name": "28815",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28815"
            },
            {
              "name": "ADV-2008-0454",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0454/references"
            },
            {
              "name": "239546",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
            },
            {
              "name": "28864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28864"
            },
            {
              "name": "DSA-1485",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1485"
            },
            {
              "name": "28924",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28924"
            },
            {
              "name": "27683",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27683"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "1019320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019320"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-01.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-01.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
            },
            {
              "name": "ADV-2008-2091",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2091/references"
            },
            {
              "name": "SUSE-SA:2008:008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088,393141,364801,346405,396613,394337,406290",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088,393141,364801,346405,396613,394337,406290"
            },
            {
              "name": "FEDORA-2008-1459",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
            },
            {
              "name": "29164",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29164"
            },
            {
              "name": "29211",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29211"
            },
            {
              "name": "FEDORA-2008-1535",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0051",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
            },
            {
              "name": "MDVSA-2008:062",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
            },
            {
              "name": "DSA-1484",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1484"
            },
            {
              "name": "28808",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28808"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:10573",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10573"
            },
            {
              "name": "28754",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28754"
            },
            {
              "name": "28758",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28758"
            },
            {
              "name": "FEDORA-2008-1435",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            },
            {
              "name": "31043",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31043"
            },
            {
              "name": "29098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29098"
            },
            {
              "name": "28839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28839"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0412",
    "datePublished": "2008-02-08T21:00:00",
    "dateReserved": "2008-01-23T00:00:00",
    "dateUpdated": "2024-08-07T07:46:54.820Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0304

Vulnerability from cvelistv5

Published

2008-02-29 19:00

Modified

2024-08-07 07:39

Severity ?

Summary

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/usn-582-2	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2009/dsa-1697	vendor-advisory, x_refsource_DEBIAN
	http://www.mozilla.org/security/announce/2008/mfsa2008-12.html	x_refsource_CONFIRM
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399	vendor-advisory, x_refsource_SLACKWARE
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/29133	third-party-advisory, x_refsource_SECUNIA
	http://www.kb.cert.org/vuls/id/661651	third-party-advisory, x_refsource_CERT-VN
	http://www.ubuntu.com/usn/usn-582-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/28012	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/33433	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31253	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11075	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2008/2091/references	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/29211	third-party-advisory, x_refsource_SECUNIA
	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=668	third-party-advisory, x_refsource_IDEFENSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:062	vendor-advisory, x_refsource_MANDRIVA
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2008/dsa-1621	vendor-advisory, x_refsource_DEBIAN
	http://securitytracker.com/id?1019504	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/31043	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29098	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:39:34.691Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-2"
          },
          {
            "name": "DSA-1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1697"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-12.html"
          },
          {
            "name": "SSA:2008-061-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "name": "29133",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29133"
          },
          {
            "name": "VU#661651",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/661651"
          },
          {
            "name": "USN-582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-1"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "28012",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28012"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "239546",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
          },
          {
            "name": "33433",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33433"
          },
          {
            "name": "31253",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31253"
          },
          {
            "name": "oval:org.mitre.oval:def:11075",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11075"
          },
          {
            "name": "ADV-2008-2091",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2091/references"
          },
          {
            "name": "29211",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29211"
          },
          {
            "name": "20080226 Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=668"
          },
          {
            "name": "MDVSA-2008:062",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "DSA-1621",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1621"
          },
          {
            "name": "1019504",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1019504"
          },
          {
            "name": "31043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31043"
          },
          {
            "name": "29098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29098"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-2"
        },
        {
          "name": "DSA-1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1697"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-12.html"
        },
        {
          "name": "SSA:2008-061-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "name": "29133",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29133"
        },
        {
          "name": "VU#661651",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/661651"
        },
        {
          "name": "USN-582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-1"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "28012",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28012"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "239546",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
        },
        {
          "name": "33433",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33433"
        },
        {
          "name": "31253",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31253"
        },
        {
          "name": "oval:org.mitre.oval:def:11075",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11075"
        },
        {
          "name": "ADV-2008-2091",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2091/references"
        },
        {
          "name": "29211",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29211"
        },
        {
          "name": "20080226 Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=668"
        },
        {
          "name": "MDVSA-2008:062",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "DSA-1621",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1621"
        },
        {
          "name": "1019504",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1019504"
        },
        {
          "name": "31043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31043"
        },
        {
          "name": "29098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29098"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-0304",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-582-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-2"
            },
            {
              "name": "DSA-1697",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1697"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-12.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-12.html"
            },
            {
              "name": "SSA:2008-061-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "29133",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29133"
            },
            {
              "name": "VU#661651",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/661651"
            },
            {
              "name": "USN-582-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-1"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "28012",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28012"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "239546",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
            },
            {
              "name": "33433",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33433"
            },
            {
              "name": "31253",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31253"
            },
            {
              "name": "oval:org.mitre.oval:def:11075",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11075"
            },
            {
              "name": "ADV-2008-2091",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2091/references"
            },
            {
              "name": "29211",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29211"
            },
            {
              "name": "20080226 Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=668"
            },
            {
              "name": "MDVSA-2008:062",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "DSA-1621",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1621"
            },
            {
              "name": "1019504",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1019504"
            },
            {
              "name": "31043",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31043"
            },
            {
              "name": "29098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29098"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-0304",
    "datePublished": "2008-02-29T19:00:00",
    "dateReserved": "2008-01-16T00:00:00",
    "dateUpdated": "2024-08-07T07:39:34.691Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0415

Vulnerability from cvelistv5

Published

2008-02-08 21:00

Modified

2024-08-07 07:46

Severity ?

Summary

Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2008-0104.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-582-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/usn-576-1	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	http://secunia.com/advisories/28939	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1506	vendor-advisory, x_refsource_DEBIAN
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-1995	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://secunia.com/advisories/28766	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28818	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28865	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29049	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0453/references	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-0103.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28877	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28879	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-582-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29567	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0105.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28958	third-party-advisory, x_refsource_SECUNIA
	http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html	x_refsource_CONFIRM
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/archive/1/488971/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2008/dsa-1489	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/archive/1/488002/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/487826/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/29086	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28815	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0454/references	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/28864	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695%2C393761%2C393762%2C399298%2C407289%2C372075%2C363597	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9897	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2008/dsa-1485	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28924	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/27683	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2008/mfsa2008-03.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1019327	vdb-entry, x_refsource_SECTRACK
	http://wiki.rpath.com/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2008/2091/references	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/29164	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29211	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2008-0051	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:062	vendor-advisory, x_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1484	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28808	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/28754	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28758	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/31043	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29098	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28839	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:46:54.332Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
          },
          {
            "name": "USN-582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-2"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-576-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "name": "28939",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28939"
          },
          {
            "name": "DSA-1506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1506"
          },
          {
            "name": "SSA:2008-061-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1995"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
          },
          {
            "name": "28766",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28766"
          },
          {
            "name": "28818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28818"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "28865",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28865"
          },
          {
            "name": "29049",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29049"
          },
          {
            "name": "ADV-2008-0453",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0453/references"
          },
          {
            "name": "RHSA-2008:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
          },
          {
            "name": "28877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28877"
          },
          {
            "name": "28879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28879"
          },
          {
            "name": "USN-582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-582-1"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "29567",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29567"
          },
          {
            "name": "RHSA-2008:0105",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
          },
          {
            "name": "28958",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28958"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "name": "20080229 rPSA-2008-0093-1 thunderbird",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
          },
          {
            "name": "DSA-1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1489"
          },
          {
            "name": "20080212 FLEA-2008-0001-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
          },
          {
            "name": "20080209 rPSA-2008-0051-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
          },
          {
            "name": "29086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29086"
          },
          {
            "name": "28815",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28815"
          },
          {
            "name": "ADV-2008-0454",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0454/references"
          },
          {
            "name": "239546",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
          },
          {
            "name": "28864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28864"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695%2C393761%2C393762%2C399298%2C407289%2C372075%2C363597"
          },
          {
            "name": "oval:org.mitre.oval:def:9897",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9897"
          },
          {
            "name": "DSA-1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1485"
          },
          {
            "name": "28924",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28924"
          },
          {
            "name": "27683",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27683"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-03.html"
          },
          {
            "name": "1019327",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
          },
          {
            "name": "ADV-2008-2091",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2091/references"
          },
          {
            "name": "SUSE-SA:2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
          },
          {
            "name": "FEDORA-2008-1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
          },
          {
            "name": "29164",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29164"
          },
          {
            "name": "29211",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29211"
          },
          {
            "name": "FEDORA-2008-1535",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
          },
          {
            "name": "MDVSA-2008:062",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
          },
          {
            "name": "DSA-1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1484"
          },
          {
            "name": "28808",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28808"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "28754",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28754"
          },
          {
            "name": "28758",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28758"
          },
          {
            "name": "FEDORA-2008-1435",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          },
          {
            "name": "31043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31043"
          },
          {
            "name": "29098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29098"
          },
          {
            "name": "28839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28839"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka \"JavaScript privilege escalation bugs.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
        },
        {
          "name": "USN-582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-2"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-576-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "name": "28939",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28939"
        },
        {
          "name": "DSA-1506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1506"
        },
        {
          "name": "SSA:2008-061-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1995"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
        },
        {
          "name": "28766",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28766"
        },
        {
          "name": "28818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28818"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "28865",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28865"
        },
        {
          "name": "29049",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29049"
        },
        {
          "name": "ADV-2008-0453",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0453/references"
        },
        {
          "name": "RHSA-2008:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
        },
        {
          "name": "28877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28877"
        },
        {
          "name": "28879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28879"
        },
        {
          "name": "USN-582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-582-1"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "29567",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29567"
        },
        {
          "name": "RHSA-2008:0105",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
        },
        {
          "name": "28958",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28958"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "name": "20080229 rPSA-2008-0093-1 thunderbird",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
        },
        {
          "name": "DSA-1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1489"
        },
        {
          "name": "20080212 FLEA-2008-0001-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
        },
        {
          "name": "20080209 rPSA-2008-0051-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
        },
        {
          "name": "29086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29086"
        },
        {
          "name": "28815",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28815"
        },
        {
          "name": "ADV-2008-0454",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0454/references"
        },
        {
          "name": "239546",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
        },
        {
          "name": "28864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28864"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695%2C393761%2C393762%2C399298%2C407289%2C372075%2C363597"
        },
        {
          "name": "oval:org.mitre.oval:def:9897",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9897"
        },
        {
          "name": "DSA-1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1485"
        },
        {
          "name": "28924",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28924"
        },
        {
          "name": "27683",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27683"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-03.html"
        },
        {
          "name": "1019327",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
        },
        {
          "name": "ADV-2008-2091",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2091/references"
        },
        {
          "name": "SUSE-SA:2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
        },
        {
          "name": "FEDORA-2008-1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
        },
        {
          "name": "29164",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29164"
        },
        {
          "name": "29211",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29211"
        },
        {
          "name": "FEDORA-2008-1535",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
        },
        {
          "name": "MDVSA-2008:062",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
        },
        {
          "name": "DSA-1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1484"
        },
        {
          "name": "28808",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28808"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "28754",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28754"
        },
        {
          "name": "28758",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28758"
        },
        {
          "name": "FEDORA-2008-1435",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        },
        {
          "name": "31043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31043"
        },
        {
          "name": "29098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29098"
        },
        {
          "name": "28839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28839"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0415",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka \"JavaScript privilege escalation bugs.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2008:0104",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
            },
            {
              "name": "USN-582-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-2"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-576-1"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "28939",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28939"
            },
            {
              "name": "DSA-1506",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1506"
            },
            {
              "name": "SSA:2008-061-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.445399"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1995",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1995"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
            },
            {
              "name": "28766",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28766"
            },
            {
              "name": "28818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28818"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "28865",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28865"
            },
            {
              "name": "29049",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29049"
            },
            {
              "name": "ADV-2008-0453",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0453/references"
            },
            {
              "name": "RHSA-2008:0103",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
            },
            {
              "name": "28877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28877"
            },
            {
              "name": "28879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28879"
            },
            {
              "name": "USN-582-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-582-1"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "29567",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29567"
            },
            {
              "name": "RHSA-2008:0105",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
            },
            {
              "name": "28958",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28958"
            },
            {
              "name": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html",
              "refsource": "CONFIRM",
              "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "20080229 rPSA-2008-0093-1 thunderbird",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
            },
            {
              "name": "DSA-1489",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1489"
            },
            {
              "name": "20080212 FLEA-2008-0001-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
            },
            {
              "name": "20080209 rPSA-2008-0051-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
            },
            {
              "name": "29086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29086"
            },
            {
              "name": "28815",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28815"
            },
            {
              "name": "ADV-2008-0454",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0454/references"
            },
            {
              "name": "239546",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1"
            },
            {
              "name": "28864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28864"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695,393761,393762,399298,407289,372075,363597",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695,393761,393762,399298,407289,372075,363597"
            },
            {
              "name": "oval:org.mitre.oval:def:9897",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9897"
            },
            {
              "name": "DSA-1485",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1485"
            },
            {
              "name": "28924",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28924"
            },
            {
              "name": "27683",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27683"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-03.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-03.html"
            },
            {
              "name": "1019327",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019327"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
            },
            {
              "name": "ADV-2008-2091",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2091/references"
            },
            {
              "name": "SUSE-SA:2008:008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
            },
            {
              "name": "FEDORA-2008-1459",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
            },
            {
              "name": "29164",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29164"
            },
            {
              "name": "29211",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29211"
            },
            {
              "name": "FEDORA-2008-1535",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0051",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
            },
            {
              "name": "MDVSA-2008:062",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
            },
            {
              "name": "DSA-1484",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1484"
            },
            {
              "name": "28808",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28808"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "28754",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28754"
            },
            {
              "name": "28758",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28758"
            },
            {
              "name": "FEDORA-2008-1435",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            },
            {
              "name": "31043",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31043"
            },
            {
              "name": "29098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29098"
            },
            {
              "name": "28839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28839"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0415",
    "datePublished": "2008-02-08T21:00:00",
    "dateReserved": "2008-01-23T00:00:00",
    "dateUpdated": "2024-08-07T07:46:54.332Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0419

Vulnerability from cvelistv5

Published

2008-02-08 21:00

Modified

2024-08-07 07:46

Severity ?

Summary

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2008-0104.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-576-1	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=400556	x_refsource_CONFIRM
	http://secunia.com/advisories/28939	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1506	vendor-advisory, x_refsource_DEBIAN
	https://issues.rpath.com/browse/RPL-1995	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://secunia.com/advisories/28766	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28818	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28865	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29049	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0453/references	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-0103.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28877	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28879	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29567	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0105.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28958	third-party-advisory, x_refsource_SECUNIA
	http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html	x_refsource_CONFIRM
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/archive/1/488971/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2008/dsa-1489	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/archive/1/488002/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/487826/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/29086	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28815	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28864	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1485	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28924	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/27683	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2008/mfsa2008-06.html	x_refsource_CONFIRM
	http://wiki.rpath.com/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11652	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.kb.cert.org/vuls/id/879056	third-party-advisory, x_refsource_CERT-VN
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/29164	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2008-0051	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1019328	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2008/dsa-1484	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28808	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/28754	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28758	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/28839	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:46:54.282Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-576-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=400556"
          },
          {
            "name": "28939",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28939"
          },
          {
            "name": "DSA-1506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1506"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1995"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
          },
          {
            "name": "28766",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28766"
          },
          {
            "name": "28818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28818"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "28865",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28865"
          },
          {
            "name": "29049",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29049"
          },
          {
            "name": "ADV-2008-0453",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0453/references"
          },
          {
            "name": "RHSA-2008:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
          },
          {
            "name": "28877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28877"
          },
          {
            "name": "28879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28879"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "29567",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29567"
          },
          {
            "name": "RHSA-2008:0105",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
          },
          {
            "name": "28958",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28958"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "name": "20080229 rPSA-2008-0093-1 thunderbird",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
          },
          {
            "name": "DSA-1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1489"
          },
          {
            "name": "20080212 FLEA-2008-0001-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
          },
          {
            "name": "20080209 rPSA-2008-0051-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
          },
          {
            "name": "29086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29086"
          },
          {
            "name": "28815",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28815"
          },
          {
            "name": "28864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28864"
          },
          {
            "name": "DSA-1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1485"
          },
          {
            "name": "28924",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28924"
          },
          {
            "name": "27683",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27683"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-06.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
          },
          {
            "name": "oval:org.mitre.oval:def:11652",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11652"
          },
          {
            "name": "SUSE-SA:2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
          },
          {
            "name": "VU#879056",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/879056"
          },
          {
            "name": "FEDORA-2008-1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
          },
          {
            "name": "29164",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29164"
          },
          {
            "name": "FEDORA-2008-1535",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
          },
          {
            "name": "1019328",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019328"
          },
          {
            "name": "DSA-1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1484"
          },
          {
            "name": "28808",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28808"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "28754",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28754"
          },
          {
            "name": "28758",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28758"
          },
          {
            "name": "FEDORA-2008-1435",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          },
          {
            "name": "28839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28839"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-576-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=400556"
        },
        {
          "name": "28939",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28939"
        },
        {
          "name": "DSA-1506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1506"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1995"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
        },
        {
          "name": "28766",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28766"
        },
        {
          "name": "28818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28818"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "28865",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28865"
        },
        {
          "name": "29049",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29049"
        },
        {
          "name": "ADV-2008-0453",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0453/references"
        },
        {
          "name": "RHSA-2008:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
        },
        {
          "name": "28877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28877"
        },
        {
          "name": "28879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28879"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "29567",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29567"
        },
        {
          "name": "RHSA-2008:0105",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
        },
        {
          "name": "28958",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28958"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "name": "20080229 rPSA-2008-0093-1 thunderbird",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
        },
        {
          "name": "DSA-1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1489"
        },
        {
          "name": "20080212 FLEA-2008-0001-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
        },
        {
          "name": "20080209 rPSA-2008-0051-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
        },
        {
          "name": "29086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29086"
        },
        {
          "name": "28815",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28815"
        },
        {
          "name": "28864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28864"
        },
        {
          "name": "DSA-1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1485"
        },
        {
          "name": "28924",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28924"
        },
        {
          "name": "27683",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27683"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-06.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
        },
        {
          "name": "oval:org.mitre.oval:def:11652",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11652"
        },
        {
          "name": "SUSE-SA:2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
        },
        {
          "name": "VU#879056",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/879056"
        },
        {
          "name": "FEDORA-2008-1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
        },
        {
          "name": "29164",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29164"
        },
        {
          "name": "FEDORA-2008-1535",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
        },
        {
          "name": "1019328",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019328"
        },
        {
          "name": "DSA-1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1484"
        },
        {
          "name": "28808",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28808"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "28754",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28754"
        },
        {
          "name": "28758",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28758"
        },
        {
          "name": "FEDORA-2008-1435",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        },
        {
          "name": "28839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28839"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0419",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2008:0104",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-576-1"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=400556",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=400556"
            },
            {
              "name": "28939",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28939"
            },
            {
              "name": "DSA-1506",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1506"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1995",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1995"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
            },
            {
              "name": "28766",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28766"
            },
            {
              "name": "28818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28818"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "28865",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28865"
            },
            {
              "name": "29049",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29049"
            },
            {
              "name": "ADV-2008-0453",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0453/references"
            },
            {
              "name": "RHSA-2008:0103",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
            },
            {
              "name": "28877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28877"
            },
            {
              "name": "28879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28879"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "29567",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29567"
            },
            {
              "name": "RHSA-2008:0105",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
            },
            {
              "name": "28958",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28958"
            },
            {
              "name": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html",
              "refsource": "CONFIRM",
              "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "20080229 rPSA-2008-0093-1 thunderbird",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
            },
            {
              "name": "DSA-1489",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1489"
            },
            {
              "name": "20080212 FLEA-2008-0001-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
            },
            {
              "name": "20080209 rPSA-2008-0051-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
            },
            {
              "name": "29086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29086"
            },
            {
              "name": "28815",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28815"
            },
            {
              "name": "28864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28864"
            },
            {
              "name": "DSA-1485",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1485"
            },
            {
              "name": "28924",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28924"
            },
            {
              "name": "27683",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27683"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-06.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-06.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
            },
            {
              "name": "oval:org.mitre.oval:def:11652",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11652"
            },
            {
              "name": "SUSE-SA:2008:008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
            },
            {
              "name": "VU#879056",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/879056"
            },
            {
              "name": "FEDORA-2008-1459",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
            },
            {
              "name": "29164",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29164"
            },
            {
              "name": "FEDORA-2008-1535",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0051",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
            },
            {
              "name": "1019328",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019328"
            },
            {
              "name": "DSA-1484",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1484"
            },
            {
              "name": "28808",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28808"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "28754",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28754"
            },
            {
              "name": "28758",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28758"
            },
            {
              "name": "FEDORA-2008-1435",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            },
            {
              "name": "28839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28839"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0419",
    "datePublished": "2008-02-08T21:00:00",
    "dateReserved": "2008-01-23T00:00:00",
    "dateUpdated": "2024-08-07T07:46:54.282Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0592

Vulnerability from cvelistv5

Published

2008-02-08 23:00

Modified

2024-08-07 07:54

Severity ?

Summary

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2008-0104.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-576-1	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	http://secunia.com/advisories/28939	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1506	vendor-advisory, x_refsource_DEBIAN
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/28818	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28865	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0453/references	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9972	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2008-0103.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28877	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28879	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=387258	x_refsource_CONFIRM
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29567	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0105.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28958	third-party-advisory, x_refsource_SECUNIA
	http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html	x_refsource_CONFIRM
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securitytracker.com/id?1019340	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2008/dsa-1489	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/archive/1/488002/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/487826/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/29086	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28864	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1485	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28924	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/27683	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2008-0051	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1484	vendor-advisory, x_refsource_DEBIAN
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://www.mozilla.org/security/announce/2008/mfsa2008-09.html	x_refsource_CONFIRM
	http://secunia.com/advisories/28754	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:54:22.462Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-576-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "name": "28939",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28939"
          },
          {
            "name": "DSA-1506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1506"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "name": "28818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28818"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "28865",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28865"
          },
          {
            "name": "ADV-2008-0453",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0453/references"
          },
          {
            "name": "oval:org.mitre.oval:def:9972",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9972"
          },
          {
            "name": "RHSA-2008:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
          },
          {
            "name": "28877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28877"
          },
          {
            "name": "28879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28879"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=387258"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "29567",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29567"
          },
          {
            "name": "RHSA-2008:0105",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
          },
          {
            "name": "28958",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28958"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "name": "1019340",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019340"
          },
          {
            "name": "DSA-1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1489"
          },
          {
            "name": "20080212 FLEA-2008-0001-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
          },
          {
            "name": "20080209 rPSA-2008-0051-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
          },
          {
            "name": "29086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29086"
          },
          {
            "name": "28864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28864"
          },
          {
            "name": "DSA-1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1485"
          },
          {
            "name": "28924",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28924"
          },
          {
            "name": "27683",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27683"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "name": "SUSE-SA:2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
          },
          {
            "name": "FEDORA-2008-1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
          },
          {
            "name": "FEDORA-2008-1535",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
          },
          {
            "name": "DSA-1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1484"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-09.html"
          },
          {
            "name": "28754",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28754"
          },
          {
            "name": "FEDORA-2008-1435",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a \"Content-Disposition: attachment\" and an invalid \"Content-Type: plain/text,\" which prevents Firefox from rendering future plain text files within the browser."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-576-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "name": "28939",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28939"
        },
        {
          "name": "DSA-1506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1506"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "name": "28818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28818"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "28865",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28865"
        },
        {
          "name": "ADV-2008-0453",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0453/references"
        },
        {
          "name": "oval:org.mitre.oval:def:9972",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9972"
        },
        {
          "name": "RHSA-2008:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
        },
        {
          "name": "28877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28877"
        },
        {
          "name": "28879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28879"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=387258"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "29567",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29567"
        },
        {
          "name": "RHSA-2008:0105",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
        },
        {
          "name": "28958",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28958"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "name": "1019340",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019340"
        },
        {
          "name": "DSA-1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1489"
        },
        {
          "name": "20080212 FLEA-2008-0001-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
        },
        {
          "name": "20080209 rPSA-2008-0051-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
        },
        {
          "name": "29086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29086"
        },
        {
          "name": "28864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28864"
        },
        {
          "name": "DSA-1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1485"
        },
        {
          "name": "28924",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28924"
        },
        {
          "name": "27683",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27683"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "name": "SUSE-SA:2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
        },
        {
          "name": "FEDORA-2008-1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
        },
        {
          "name": "FEDORA-2008-1535",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
        },
        {
          "name": "DSA-1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1484"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-09.html"
        },
        {
          "name": "28754",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28754"
        },
        {
          "name": "FEDORA-2008-1435",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0592",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a \"Content-Disposition: attachment\" and an invalid \"Content-Type: plain/text,\" which prevents Firefox from rendering future plain text files within the browser."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2008:0104",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-576-1"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "28939",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28939"
            },
            {
              "name": "DSA-1506",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1506"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "28818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28818"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "28865",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28865"
            },
            {
              "name": "ADV-2008-0453",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0453/references"
            },
            {
              "name": "oval:org.mitre.oval:def:9972",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9972"
            },
            {
              "name": "RHSA-2008:0103",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
            },
            {
              "name": "28877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28877"
            },
            {
              "name": "28879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28879"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=387258",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=387258"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "29567",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29567"
            },
            {
              "name": "RHSA-2008:0105",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
            },
            {
              "name": "28958",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28958"
            },
            {
              "name": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html",
              "refsource": "CONFIRM",
              "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "1019340",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019340"
            },
            {
              "name": "DSA-1489",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1489"
            },
            {
              "name": "20080212 FLEA-2008-0001-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
            },
            {
              "name": "20080209 rPSA-2008-0051-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
            },
            {
              "name": "29086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29086"
            },
            {
              "name": "28864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28864"
            },
            {
              "name": "DSA-1485",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1485"
            },
            {
              "name": "28924",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28924"
            },
            {
              "name": "27683",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27683"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "SUSE-SA:2008:008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
            },
            {
              "name": "FEDORA-2008-1459",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
            },
            {
              "name": "FEDORA-2008-1535",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0051",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
            },
            {
              "name": "DSA-1484",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1484"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-09.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-09.html"
            },
            {
              "name": "28754",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28754"
            },
            {
              "name": "FEDORA-2008-1435",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0592",
    "datePublished": "2008-02-08T23:00:00",
    "dateReserved": "2008-02-05T00:00:00",
    "dateUpdated": "2024-08-07T07:54:22.462Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-0591

Vulnerability from cvelistv5

Published

2008-02-08 23:00

Modified

2024-08-07 07:54

Severity ?

Summary

Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2008-0104.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-576-1	vendor-advisory, x_refsource_UBUNTU
	http://browser.netscape.com/releasenotes/	x_refsource_CONFIRM
	http://secunia.com/advisories/28939	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1506	vendor-advisory, x_refsource_DEBIAN
	https://issues.rpath.com/browse/RPL-1995	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html	vendor-advisory, x_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://lcamtuf.coredump.cx/ffclick2/	x_refsource_MISC
	http://secunia.com/advisories/28766	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28818	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2008/mfsa2008-08.html	x_refsource_CONFIRM
	http://secunia.com/advisories/30620	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28865	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29049	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0453/references	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-0103.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28877	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28879	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29167	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29567	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0105.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/28958	third-party-advisory, x_refsource_SECUNIA
	http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html	x_refsource_CONFIRM
	http://secunia.com/advisories/30327	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	vendor-advisory, x_refsource_SUNALERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10900	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/archive/1/488971/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2008/dsa-1489	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/archive/1/488002/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/487826/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/29086	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0454/references	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/28864	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1485	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28924	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/27683	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=376473	x_refsource_CONFIRM
	http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html	mailing-list, x_refsource_FULLDISC
	http://www.vupen.com/english/advisories/2008/1793/references	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/archive/1/470446/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securitytracker.com/id?1019339	vdb-entry, x_refsource_SECTRACK
	http://wiki.rpath.com/Advisories:rPSA-2008-0093	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/24293	vdb-entry, x_refsource_BID
	http://securityreason.com/securityalert/2781	third-party-advisory, x_refsource_SREASON
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/29164	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html	vendor-advisory, x_refsource_FEDORA
	http://wiki.rpath.com/Advisories:rPSA-2008-0051	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:062	vendor-advisory, x_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1484	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28808	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0627/references	vdb-entry, x_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/28754	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28758	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:048	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/28839	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:54:22.191Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
          },
          {
            "name": "USN-576-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-576-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://browser.netscape.com/releasenotes/"
          },
          {
            "name": "28939",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28939"
          },
          {
            "name": "DSA-1506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1506"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1995"
          },
          {
            "name": "FEDORA-2008-2118",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
          },
          {
            "name": "FEDORA-2008-2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lcamtuf.coredump.cx/ffclick2/"
          },
          {
            "name": "28766",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28766"
          },
          {
            "name": "28818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28818"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-08.html"
          },
          {
            "name": "30620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30620"
          },
          {
            "name": "28865",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28865"
          },
          {
            "name": "29049",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29049"
          },
          {
            "name": "ADV-2008-0453",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0453/references"
          },
          {
            "name": "RHSA-2008:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
          },
          {
            "name": "28877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28877"
          },
          {
            "name": "28879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28879"
          },
          {
            "name": "29167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29167"
          },
          {
            "name": "29567",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29567"
          },
          {
            "name": "RHSA-2008:0105",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
          },
          {
            "name": "28958",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28958"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
          },
          {
            "name": "30327",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30327"
          },
          {
            "name": "238492",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
          },
          {
            "name": "oval:org.mitre.oval:def:10900",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10900"
          },
          {
            "name": "20080229 rPSA-2008-0093-1 thunderbird",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
          },
          {
            "name": "DSA-1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1489"
          },
          {
            "name": "20080212 FLEA-2008-0001-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
          },
          {
            "name": "20080209 rPSA-2008-0051-1 firefox",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
          },
          {
            "name": "29086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29086"
          },
          {
            "name": "ADV-2008-0454",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0454/references"
          },
          {
            "name": "28864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28864"
          },
          {
            "name": "DSA-1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1485"
          },
          {
            "name": "28924",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28924"
          },
          {
            "name": "27683",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27683"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=376473"
          },
          {
            "name": "20070604 Assorted browser vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html"
          },
          {
            "name": "ADV-2008-1793",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1793/references"
          },
          {
            "name": "20070604 Assorted browser vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/470446/100/0/threaded"
          },
          {
            "name": "1019339",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019339"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
          },
          {
            "name": "SUSE-SA:2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
          },
          {
            "name": "24293",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24293"
          },
          {
            "name": "2781",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/2781"
          },
          {
            "name": "FEDORA-2008-1459",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
          },
          {
            "name": "29164",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29164"
          },
          {
            "name": "FEDORA-2008-1535",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
          },
          {
            "name": "MDVSA-2008:062",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
          },
          {
            "name": "DSA-1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1484"
          },
          {
            "name": "28808",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28808"
          },
          {
            "name": "ADV-2008-0627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0627/references"
          },
          {
            "name": "GLSA-200805-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
          },
          {
            "name": "28754",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28754"
          },
          {
            "name": "28758",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28758"
          },
          {
            "name": "FEDORA-2008-1435",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
          },
          {
            "name": "MDVSA-2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
          },
          {
            "name": "28839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28839"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-06-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the \"dialog refocus bug\" or \"ffclick2\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
        },
        {
          "name": "USN-576-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-576-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://browser.netscape.com/releasenotes/"
        },
        {
          "name": "28939",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28939"
        },
        {
          "name": "DSA-1506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1506"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1995"
        },
        {
          "name": "FEDORA-2008-2118",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
        },
        {
          "name": "FEDORA-2008-2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lcamtuf.coredump.cx/ffclick2/"
        },
        {
          "name": "28766",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28766"
        },
        {
          "name": "28818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28818"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-08.html"
        },
        {
          "name": "30620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30620"
        },
        {
          "name": "28865",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28865"
        },
        {
          "name": "29049",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29049"
        },
        {
          "name": "ADV-2008-0453",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0453/references"
        },
        {
          "name": "RHSA-2008:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
        },
        {
          "name": "28877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28877"
        },
        {
          "name": "28879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28879"
        },
        {
          "name": "29167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29167"
        },
        {
          "name": "29567",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29567"
        },
        {
          "name": "RHSA-2008:0105",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
        },
        {
          "name": "28958",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28958"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
        },
        {
          "name": "30327",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30327"
        },
        {
          "name": "238492",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
        },
        {
          "name": "oval:org.mitre.oval:def:10900",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10900"
        },
        {
          "name": "20080229 rPSA-2008-0093-1 thunderbird",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
        },
        {
          "name": "DSA-1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1489"
        },
        {
          "name": "20080212 FLEA-2008-0001-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
        },
        {
          "name": "20080209 rPSA-2008-0051-1 firefox",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
        },
        {
          "name": "29086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29086"
        },
        {
          "name": "ADV-2008-0454",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0454/references"
        },
        {
          "name": "28864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28864"
        },
        {
          "name": "DSA-1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1485"
        },
        {
          "name": "28924",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28924"
        },
        {
          "name": "27683",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27683"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=376473"
        },
        {
          "name": "20070604 Assorted browser vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html"
        },
        {
          "name": "ADV-2008-1793",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1793/references"
        },
        {
          "name": "20070604 Assorted browser vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/470446/100/0/threaded"
        },
        {
          "name": "1019339",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019339"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
        },
        {
          "name": "SUSE-SA:2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
        },
        {
          "name": "24293",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24293"
        },
        {
          "name": "2781",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/2781"
        },
        {
          "name": "FEDORA-2008-1459",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
        },
        {
          "name": "29164",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29164"
        },
        {
          "name": "FEDORA-2008-1535",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
        },
        {
          "name": "MDVSA-2008:062",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
        },
        {
          "name": "DSA-1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1484"
        },
        {
          "name": "28808",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28808"
        },
        {
          "name": "ADV-2008-0627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0627/references"
        },
        {
          "name": "GLSA-200805-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
        },
        {
          "name": "28754",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28754"
        },
        {
          "name": "28758",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28758"
        },
        {
          "name": "FEDORA-2008-1435",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
        },
        {
          "name": "MDVSA-2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
        },
        {
          "name": "28839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28839"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-0591",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the \"dialog refocus bug\" or \"ffclick2\"."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2008:0104",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0104.html"
            },
            {
              "name": "USN-576-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-576-1"
            },
            {
              "name": "http://browser.netscape.com/releasenotes/",
              "refsource": "CONFIRM",
              "url": "http://browser.netscape.com/releasenotes/"
            },
            {
              "name": "28939",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28939"
            },
            {
              "name": "DSA-1506",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1506"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1995",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1995"
            },
            {
              "name": "FEDORA-2008-2118",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html"
            },
            {
              "name": "FEDORA-2008-2060",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093"
            },
            {
              "name": "http://lcamtuf.coredump.cx/ffclick2/",
              "refsource": "MISC",
              "url": "http://lcamtuf.coredump.cx/ffclick2/"
            },
            {
              "name": "28766",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28766"
            },
            {
              "name": "28818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28818"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2008/mfsa2008-08.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-08.html"
            },
            {
              "name": "30620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30620"
            },
            {
              "name": "28865",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28865"
            },
            {
              "name": "29049",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29049"
            },
            {
              "name": "ADV-2008-0453",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0453/references"
            },
            {
              "name": "RHSA-2008:0103",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0103.html"
            },
            {
              "name": "28877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28877"
            },
            {
              "name": "28879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28879"
            },
            {
              "name": "29167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29167"
            },
            {
              "name": "29567",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29567"
            },
            {
              "name": "RHSA-2008:0105",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0105.html"
            },
            {
              "name": "28958",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28958"
            },
            {
              "name": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html",
              "refsource": "CONFIRM",
              "url": "http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html"
            },
            {
              "name": "30327",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30327"
            },
            {
              "name": "238492",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1"
            },
            {
              "name": "oval:org.mitre.oval:def:10900",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10900"
            },
            {
              "name": "20080229 rPSA-2008-0093-1 thunderbird",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488971/100/0/threaded"
            },
            {
              "name": "DSA-1489",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1489"
            },
            {
              "name": "20080212 FLEA-2008-0001-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488002/100/0/threaded"
            },
            {
              "name": "20080209 rPSA-2008-0051-1 firefox",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487826/100/0/threaded"
            },
            {
              "name": "29086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29086"
            },
            {
              "name": "ADV-2008-0454",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0454/references"
            },
            {
              "name": "28864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28864"
            },
            {
              "name": "DSA-1485",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1485"
            },
            {
              "name": "28924",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28924"
            },
            {
              "name": "27683",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27683"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=376473",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=376473"
            },
            {
              "name": "20070604 Assorted browser vulnerabilities",
              "refsource": "FULLDISC",
              "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html"
            },
            {
              "name": "ADV-2008-1793",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1793/references"
            },
            {
              "name": "20070604 Assorted browser vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/470446/100/0/threaded"
            },
            {
              "name": "1019339",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019339"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0093",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0093"
            },
            {
              "name": "SUSE-SA:2008:008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html"
            },
            {
              "name": "24293",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24293"
            },
            {
              "name": "2781",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/2781"
            },
            {
              "name": "FEDORA-2008-1459",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html"
            },
            {
              "name": "29164",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29164"
            },
            {
              "name": "FEDORA-2008-1535",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0051",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0051"
            },
            {
              "name": "MDVSA-2008:062",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:062"
            },
            {
              "name": "DSA-1484",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1484"
            },
            {
              "name": "28808",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28808"
            },
            {
              "name": "ADV-2008-0627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0627/references"
            },
            {
              "name": "GLSA-200805-18",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml"
            },
            {
              "name": "28754",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28754"
            },
            {
              "name": "28758",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28758"
            },
            {
              "name": "FEDORA-2008-1435",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html"
            },
            {
              "name": "MDVSA-2008:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:048"
            },
            {
              "name": "28839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28839"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0591",
    "datePublished": "2008-02-08T23:00:00",
    "dateReserved": "2008-02-05T00:00:00",
    "dateUpdated": "2024-08-07T07:54:22.191Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature