Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-0016
HistorySep 24, 2008 - 8:37 p.m.

CVE-2008-0016

2008-09-2420:37:04
CWE-119
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.87 High

EPSS

Percentile

98.6%

JSON

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

Affected configurations

NVD
Node
mozillafirefoxRange≤2.0.0.16
OR
mozillafirefoxMatch0.8
OR
mozillafirefoxMatch0.9
OR
mozillafirefoxMatch0.9rc
OR
mozillafirefoxMatch0.9.1
OR
mozillafirefoxMatch0.9.2
OR
mozillafirefoxMatch0.9.3
OR
mozillafirefoxMatch0.9_rc
OR
mozillafirefoxMatch0.10
OR
mozillafirefoxMatch0.10.1
OR
mozillafirefoxMatch1.0
OR
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillafirefoxMatch1.0.3
OR
mozillafirefoxMatch1.0.4
OR
mozillafirefoxMatch1.0.5
OR
mozillafirefoxMatch1.0.6
OR
mozillafirefoxMatch1.0.7
OR
mozillafirefoxMatch1.0.8
OR
mozillafirefoxMatch1.5
OR
mozillafirefoxMatch1.5beta1
OR
mozillafirefoxMatch1.5beta2
OR
mozillafirefoxMatch1.5.0.1
OR
mozillafirefoxMatch1.5.0.2
OR
mozillafirefoxMatch1.5.0.3
OR
mozillafirefoxMatch1.5.0.4
OR
mozillafirefoxMatch1.5.0.5
OR
mozillafirefoxMatch1.5.0.6
OR
mozillafirefoxMatch1.5.0.7
OR
mozillafirefoxMatch1.5.0.8
OR
mozillafirefoxMatch1.5.0.9
OR
mozillafirefoxMatch1.5.0.10
OR
mozillafirefoxMatch1.5.0.11
OR
mozillafirefoxMatch1.5.0.12
OR
mozillafirefoxMatch1.5.1
OR
mozillafirefoxMatch1.5.2
OR
mozillafirefoxMatch1.5.3
OR
mozillafirefoxMatch1.5.4
OR
mozillafirefoxMatch1.5.5
OR
mozillafirefoxMatch1.5.6
OR
mozillafirefoxMatch1.5.7
OR
mozillafirefoxMatch1.5.8
OR
mozillafirefoxMatch1.8
OR
mozillafirefoxMatch2.0
OR
mozillafirefoxMatch2.0.0.1
OR
mozillafirefoxMatch2.0.0.10
OR
mozillafirefoxMatch2.0.0.11
OR
mozillafirefoxMatch2.0.0.12
OR
mozillafirefoxMatch2.0.0.13
OR
mozillafirefoxMatch2.0.0.14
OR
mozillafirefoxMatch2.0.0.15
OR
mozillaseamonkey
OR
mozillaseamonkeyRange≤1.1.11
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0alpha
OR
mozillaseamonkeyMatch1.0dev
OR
mozillaseamonkeyMatch1.0beta
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.4
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillaseamonkeyMatch1.0.7
OR
mozillaseamonkeyMatch1.0.8
OR
mozillaseamonkeyMatch1.0.9
OR
mozillaseamonkeyMatch1.0.99
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1.1
OR
mozillaseamonkeyMatch1.1.10

References

Related

cve 1
saint 4
checkpoint_advisories 2
securityvulns 2
prion 1
mozilla 1
seebug 3
veracode 1
canvas 1
packetstorm 1
exploitpack 1
cvelist 1
ubuntucve 1
exploitdb 1
openvas 61
oraclelinux 2
fedora 4
nessus 38
centos 3
redhat 2
debian 4
osv 4
freebsd 1
ubuntu 3
suse 2
gentoo 1
cve
cve
CVE-2008-0016
2008-09-24 20:37:04
saint
saint
Mozilla Firefox UTF-8 URL buffer overflow
2008-12-31 00:00:00
Mozilla Firefox UTF-8 URL buffer overflow
2008-12-31 00:00:00
Mozilla Firefox UTF-8 URL buffer overflow
2008-12-31 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox UTF-8 URL Handling Stack Buffer Overflow - Improved Performance (CVE-2008-0016)
2009-12-13 00:00:00
Firefox HTML URL Unicode Stack Buffer Overflow - Ver2 (CVE-2008-0016)
2014-03-03 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-37
2008-09-29 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2008-09-30 00:00:00
prion
prion
Stack overflow
2008-09-24 20:37:00
mozilla
mozilla
UTF-8 URL stack buffer overflow — Mozilla
2008-09-23 00:00:00
seebug
seebug
Mozilla Firefox/SeaMonkey UTF-8基于栈的缓冲区溢出漏洞
2008-09-27 00:00:00
Mozilla Firefox 2.0.0.16 UTF-8 URL Remote Buffer Overflow Exploit
2009-09-16 00:00:00
Mozilla Firefox/SeaMonkey/Thunderbird多个远程漏洞
2008-09-25 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:25:28
canvas
canvas
Immunity Canvas: FIREFOX_UTF8
2008-09-24 20:37:00
packetstorm
packetstorm
Mozilla Firefox 2.0.0.16 Buffer Overflow
2009-09-15 00:00:00
exploitpack
exploitpack
Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow
2009-09-14 00:00:00
cvelist
cvelist
CVE-2008-0016
2008-09-24 18:00:00
ubuntucve
ubuntucve
CVE-2008-0016
2008-09-24 00:00:00
exploitdb
exploitdb
Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow
2009-09-14 00:00:00
openvas
openvas
Mandriva Update for mozilla-thunderbird MDVSA-2008:206 (mozilla-thunderbird)
2009-04-09 00:00:00
CentOS Update for thunderbird CESA-2008:0908 centos4 x86_64
2009-02-27 00:00:00
RedHat Update for thunderbird RHSA-2008:0908-01
2009-03-06 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2008-10-01 00:00:00
seamonkey security update
2008-09-24 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: seamonkey-1.1.12-1.fc8
2008-09-28 18:41:42
[SECURITY] Fedora 9 Update: seamonkey-1.1.12-1.fc9
2008-09-28 18:44:23
[SECURITY] Fedora 8 Update: thunderbird-2.0.0.18-1.fc8
2008-11-21 10:57:04
nessus
nessus
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2008:206)
2009-04-23 00:00:00
RHEL 4 / 5 : thunderbird (RHSA-2008:0908)
2008-10-02 00:00:00
CentOS 4 / 5 : thunderbird (CESA-2008:0908)
2008-10-06 00:00:00
centos
centos
thunderbird security update
2008-10-03 18:55:22
seamonkey security update
2008-09-24 14:22:25
seamonkey security update
2008-09-24 23:08:13
redhat
redhat
(RHSA-2008:0908) Moderate: thunderbird security update
2008-10-01 00:00:00
(RHSA-2008:0882) Critical: seamonkey security update
2008-09-23 00:00:00
debian
debian
[SECURITY] [DSA 1649-1] New iceweasel packages fix several vulnerabilities
2008-10-08 20:15:55
[SECURITY] [DSA 1669-1] New xulrunner packages fix several vulnerabilities
2008-11-23 20:29:40
[SECURITY] [DSA 1696-1] New icedove packages fix several vulnerabilities
2009-01-07 21:32:09
osv
osv
iceweasel - several vulnerabilities
2008-10-08 00:00:00
xulrunner - several vulnerabilities
2008-11-23 00:00:00
icedove - several vulnerabilities
2009-01-07 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2008-09-24 00:00:00
ubuntu
ubuntu
Firefox and xulrunner regression
2008-09-25 00:00:00
Firefox vulnerabilities
2008-09-24 00:00:00
Firefox and xulrunner vulnerabilities
2008-09-24 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey,mozilla
2008-10-08 17:24:56
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.87 High

EPSS

Percentile

98.6%

JSON
Related for NVD:CVE-2008-0016
cve1saint4checkpoint_advisories2securityvulns2prion1mozilla1seebug3veracode1canvas1packetstorm1exploitpack1cvelist1ubuntucve1exploitdb1openvas61oraclelinux2fedora4nessus38centos3redhat2debian4osv4freebsd1ubuntu3suse2gentoo1