CVE-2008-2934

EUVD-2008-2927
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
applemac_os_x
*
canonicalubuntu_linux
8.04
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
dapper
not-affected
feisty
not-affected
gutsy
not-affected
hardy
not-affected
firefox-3.0
dapper
dne
feisty
dne
gutsy
not-affected
hardy
not-affected
iceape
dapper
dne
feisty
dne
gutsy
not-affected
hardy
dne
icedove
dapper
dne
feisty
dne
gutsy
dne
hardy
dne
iceweasel
dapper
dne
feisty
dne
gutsy
dne
hardy
dne
mozilla-thunderbird
dapper
not-affected
feisty
not-affected
gutsy
dne
hardy
dne
seamonkey
dapper
dne
feisty
dne
gutsy
dne
hardy
not-affected
thunderbird
dapper
dne
feisty
dne
gutsy
not-affected
hardy
not-affected
xulrunner
dapper
dne
feisty
not-affected
gutsy
not-affected
hardy
not-affected
xulrunner-1.9
dapper
dne
feisty
dne
gutsy
not-affected
hardy
not-affected