CVE-2008-2419
EUVD-2008-241423.05.2008, 15:32
Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code by triggering an error condition during certain Iframe operations between a JSframe write and a JSframe close, as demonstrated by an error in loading an empty Java applet defined by a 'src="javascript:"' sequence.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 2.0.0.14 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||
| firefox-3.0 |
| ||||||||||||||
| iceape |
| ||||||||||||||
| iceweasel |
| ||||||||||||||
| seamonkey |
| ||||||||||||||
| xulrunner |
|
Common Weakness Enumeration