Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5508
HistoryDec 17, 2008 - 11:30 p.m.

CVE-2008-5508

2008-12-1723:30:00
CWE-20
[email protected]
web.nvd.nist.gov
57
4
mozilla
firefox
thunderbird
seamonkey
url parsing
vulnerability
cve-2008-5508
nvd

9.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.5%

JSON

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

References

Social References

More

Related

cvelist 1
prion 2
veracode 1
mozilla 1
ubuntucve 1
securityvulns 1
cve 1
nessus 37
openvas 109
debian 2
ubuntu 3
osv 2
fedora 34
centos 2
oraclelinux 1
redhat 1
cvelist
cvelist
CVE-2008-5508
2008-12-17 23:00:00
prion
prion
Design/Logic Flaw
2008-12-17 23:30:00
Design/Logic Flaw
2021-05-26 22:15:00
veracode
veracode
Phishing Attacks
2020-04-10 00:28:11
mozilla
mozilla
Errors parsing URLs with leading whitespace and control characters — Mozilla
2008-12-16 00:00:00
ubuntucve
ubuntucve
CVE-2008-5508
2008-12-17 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-66
2008-12-18 00:00:00
cve
cve
CVE-2008-5509
2021-05-26 22:15:00
nessus
nessus
Debian DSA-1704-1 : xulrunner - several vulnerabilities
2009-01-15 00:00:00
Ubuntu 6.06 LTS : mozilla-thunderbird vulnerabilities (USN-701-2)
2013-03-09 00:00:00
openSUSE Security Update : mozilla-xulrunner190 (mozilla-xulrunner190-382)
2009-07-21 00:00:00
openvas
openvas
Ubuntu USN-701-2 (mozilla-thunderbird)
2009-01-13 00:00:00
Debian Security Advisory DSA 1704-1 (xulrunner)
2009-01-20 00:00:00
Ubuntu: Security Advisory (USN-701-2)
2009-01-13 00:00:00
debian
debian
[SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities
2009-01-14 20:29:20
[SECURITY] [DSA 1707-1] New iceweasel packages fix several vulnerabilities
2009-01-15 22:03:47
ubuntu
ubuntu
Thunderbird vulnerabilities
2009-01-06 00:00:00
Thunderbird vulnerabilities
2009-01-06 00:00:00
Firefox vulnerabilities
2008-12-18 00:00:00
osv
osv
xulrunner - several vulnerabilities
2009-01-14 00:00:00
iceweasel - several vulnerabilities
2009-01-15 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: seamonkey-1.1.14-1.fc9
2008-12-21 08:44:36
[SECURITY] Fedora 10 Update: seamonkey-1.1.14-1.fc10
2008-12-21 08:40:41
[SECURITY] Fedora 8 Update: seamonkey-1.1.14-1.fc8
2008-12-21 08:25:27
centos
centos
thunderbird security update
2009-01-08 14:35:58
firefox, nspr, nss, seamonkey, xulrunner security update
2008-12-21 23:29:01
oraclelinux
oraclelinux
thunderbird security update
2009-01-07 00:00:00
redhat
redhat
(RHSA-2009:0002) Moderate: thunderbird security update
2009-01-07 00:00:00

9.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.5%

JSON
Related for CVE-2008-5508
cvelist1prion2veracode1mozilla1ubuntucve1securityvulns1cve1nessus37openvas109debian2ubuntu3osv2fedora34centos2oraclelinux1redhat1