CVE-2008-5501

EUVD-2008-5478
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service via vectors that trigger an assertion failure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
2.0 ≤
𝑥
< 2.0.0.19
mozillafirefox
3.0 ≤
𝑥
< 3.0.5
mozillaseamonkey
1.0 ≤
𝑥
< 1.1.14
canonicalubuntu_linux
8.04
canonicalubuntu_linux
8.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox-3.0
dapper
dne
gutsy
ignored
hardy
Fixed 3.0.5+nobinonly-0ubuntu0.8.04.1
released
intrepid
Fixed 3.0.5+nobinonly-0ubuntu0.8.10.1
released
jaunty
Fixed 3.0.5+nobinonly-0ubuntu1
released
karmic
dne
lucid
dne
iceape
dapper
dne
gutsy
ignored
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
dne
mozilla-thunderbird
dapper
Fixed 1.5.0.13+1.5.0.15~prepatch080614i-0ubuntu0.6.06.1
released
gutsy
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
dne
seamonkey
dapper
dne
gutsy
dne
hardy
Fixed 2.0.8+build1+nobinonly-0ubuntu0.8.04.1
released
intrepid
ignored
jaunty
not-affected
karmic
not-affected
lucid
not-affected
thunderbird
dapper
dne
gutsy
Fixed 2.0.0.19+nobinonly-0ubuntu0.7.10.1
released
hardy
Fixed 2.0.0.19+nobinonly-0ubuntu0.8.04.1
released
intrepid
Fixed 2.0.0.19+nobinonly-0ubuntu0.8.10.1
released
jaunty
Fixed 2.0.0.19+nobinonly-0ubuntu1
released
karmic
Fixed 2.0.0.19+nobinonly-0ubuntu1
released
lucid
Fixed 2.0.0.19+nobinonly-0ubuntu1
released
xulrunner-1.9
dapper
dne
gutsy
ignored
hardy
Fixed 1.9.0.5+nobinonly-0ubuntu0.8.04.1
released
intrepid
Fixed 1.9.0.5+nobinonly-0ubuntu0.8.10.1
released
jaunty
Fixed 1.9.0.5+nobinonly-0ubuntu1
released
karmic
dne
lucid
dne
References