CVE-2008-4064
24.09.2008, 20:37
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairo_surface_set_device_offset function, (2) integer overflows when handling animated PNG data in the info_callback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp.Enginsight
Vendor | Product | Version |
---|---|---|
mozilla | firefox | 𝑥 ≤ 3.0.1 |
mozilla | firefox | 3.0 |
𝑥
= Vulnerable software versions

Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||||||||||
firefox-3.0 |
| ||||||||||||||||||||
iceape |
| ||||||||||||||||||||
mozilla-thunderbird |
| ||||||||||||||||||||
seamonkey |
| ||||||||||||||||||||
thunderbird |
| ||||||||||||||||||||
xulrunner |
| ||||||||||||||||||||
xulrunner-1.9 |
|
Common Weakness Enumeration
References