CVE-2008-4063
24.09.2008, 20:37
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.Enginsight
| Vendor | Product | Version |
|---|---|---|
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 7.04 |
| canonical | ubuntu_linux | 7.10 |
| canonical | ubuntu_linux | 8.04 |
| mozilla | firefox | 𝑥 ≤ 3.0.1 |
| mozilla | firefox | 3.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||||||
| firefox-3.0 |
| ||||||||||||||||||||
| iceape |
| ||||||||||||||||||||
| mozilla-thunderbird |
| ||||||||||||||||||||
| seamonkey |
| ||||||||||||||||||||
| thunderbird |
| ||||||||||||||||||||
| xulrunner |
| ||||||||||||||||||||
| xulrunner-1.9 |
|
References