Lucene search

K

PRIOn knowledge basePRION:CVE-2008-5510

HistoryDec 17, 2008 - 11:30 p.m.

Null pointer dereference

2008-12-1723:30:00

PRIOn knowledge base

www.prio-n.com

4

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.3%

The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the ‘\0’ escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.

CPENameOperatorVersion
ubuntu_linuxeq7.10
ubuntu_linuxeq8.04
ubuntu_linuxeq8.10
debian_linuxeq5.0
debian_linuxeq4.0
firefoxge2.0
firefoxlt2.0.0.19
firefoxge3.0
firefoxlt3.0.5
seamonkeyge1.0

Rows per page:

1-10 of 131

References

secunia.com/advisories/33184

secunia.com/advisories/33188

secunia.com/advisories/33203

secunia.com/advisories/33204

secunia.com/advisories/33205

secunia.com/advisories/33216

secunia.com/advisories/33231

secunia.com/advisories/33408

secunia.com/advisories/33523

secunia.com/advisories/34501

secunia.com/advisories/35080

sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1

sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1

www.debian.org/security/2009/dsa-1707

www.mandriva.com/security/advisories?name=MDVSA-2008:244

www.mandriva.com/security/advisories?name=MDVSA-2008:245

www.mandriva.com/security/advisories?name=MDVSA-2009:012

www.mozilla.org/security/announce/2008/mfsa2008-67.html

www.redhat.com/support/errata/RHSA-2008-1036.html

www.securityfocus.com/bid/32882

www.securitytracker.com/id?1021425

www.ubuntu.com/usn/usn-690-2

www.ubuntu.com/usn/usn-701-1

www.vupen.com/english/advisories/2009/0977

bugzilla.mozilla.org/show_bug.cgi?id=228856

exchange.xforce.ibmcloud.com/vulnerabilities/47415

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9662

usn.ubuntu.com/690-1/

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.3%

Related for PRION:CVE-2008-5510

mozilla1 veracode1 ubuntucve1 securityvulns1 cve1 ubuntu3 openvas114 nessus31 fedora42 osv1 debian1 oraclelinux1 redhat1