Lucene search
UbuntuUSN-602-1HistoryApr 22, 2008 - 12:00 a.m.
Firefox vulnerabilities
2008-04-2200:00:00
ubuntu.com
33
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.06
Percentile
93.6%
Releases
- Ubuntu 7.10
- Ubuntu 7.04
- Ubuntu 6.10
- Ubuntu 6.06
Packages
- firefox -
Details
Flaws were discovered in Firefox which could lead to crashes during
JavaScript garbage collection. If a user were tricked into opening a
malicious web page, an attacker may be able to crash the browser or
possibly execute arbitrary code with the userβs privileges.
(CVE-2008-1380)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 7.10 | noarch | firefox | <Β 2.0.0.14+2nobinonly-0ubuntu0.7.10 | UNKNOWN |
| Ubuntu | 7.10 | noarch | firefox-dbg | <Β 2.0.0.14+2nobinonly-0ubuntu0.7.10 | UNKNOWN |
| Ubuntu | 7.10 | noarch | firefox-dev | <Β 2.0.0.14+2nobinonly-0ubuntu0.7.10 | UNKNOWN |
| Ubuntu | 7.10 | noarch | firefox-gnome-support | <Β 2.0.0.14+2nobinonly-0ubuntu0.7.10 | UNKNOWN |
| Ubuntu | 7.10 | noarch | firefox-libthai | <Β 2.0.0.14+2nobinonly-0ubuntu0.7.10 | UNKNOWN |
| Ubuntu | 7.04 | noarch | firefox | <Β 2.0.0.14+1nobinonly-0ubuntu0.7.4 | UNKNOWN |
| Ubuntu | 7.04 | noarch | firefox-dbg | <Β 2.0.0.14+1nobinonly-0ubuntu0.7.4 | UNKNOWN |
| Ubuntu | 7.04 | noarch | firefox-dev | <Β 2.0.0.14+1nobinonly-0ubuntu0.7.4 | UNKNOWN |
| Ubuntu | 7.04 | noarch | firefox-gnome-support | <Β 2.0.0.14+1nobinonly-0ubuntu0.7.4 | UNKNOWN |
| Ubuntu | 7.04 | noarch | firefox-libthai | <Β 2.0.0.14+1nobinonly-0ubuntu0.7.4 | UNKNOWN |
References
Related
nessus
nessus
CentOS 4 / 5 : thunderbird (CESA-2008:0224)
2010-01-06 00:00:00
Fedora 8 : Miro-1.2-2.fc8 / chmsee-1.0.0-2.30.fc8 / devhelp-0.16.1-7.fc8 / epiphany-2.20.3-3.fc8 / etc (2008-3283)
2008-04-25 00:00:00
RHEL 4 / 5 : thunderbird (RHSA-2008:0224)
2008-05-01 00:00:00
openvas
openvas
Fedora Update for kazehakase FEDORA-2008-3249
2009-02-17 00:00:00
Fedora Update for openvrml FEDORA-2008-3249
2009-02-17 00:00:00
Fedora Update for chmsee FEDORA-2008-3249
2009-02-17 00:00:00
centos
centos
seamonkey security update
2008-04-17 15:54:11
seamonkey security update
2008-04-18 00:18:42
firefox security update
2008-04-19 13:20:35
fedora
fedora
[SECURITY] Fedora 7 Update: epiphany-2.18.3-9.fc7
2008-04-22 22:40:41
[SECURITY] Fedora 7 Update: firefox-2.0.0.14-1.fc7
2008-04-22 22:40:41
[SECURITY] Fedora 7 Update: openvrml-0.16.7-5.fc7
2008-04-22 22:40:41
osv
osv
iceape - arbitrary code execution
2008-04-28 00:00:00
xulrunner - arbitrary code execution
2008-04-24 00:00:00
iceweasel - arbitrary code execution
2008-04-23 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2008-04-30 00:00:00
firefox security update
2008-04-17 00:00:00
seamonkey security update
2008-04-17 00:00:00
debian
debian
[SECURITY] [DSA 1562-1] New iceape packages fix arbitrary code execution
2008-04-28 19:47:46
[SECURITY] [DSA 1558-1] New xulrunner packages fix arbitrary code execution
2008-04-24 21:21:53
[SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution
2008-04-23 17:54:24
seebug
seebug
Mozilla Firefox JavaScriptεεΎζΆιε¨ε
εη ΄εζΌζ΄
2008-04-19 00:00:00
securityvulns
securityvulns
Mozilla Firefox memory corruption
2008-04-18 00:00:00
Mozilla Foundation Security Advisory 2008-20
2008-04-18 00:00:00
redhat
redhat
(RHSA-2008:0222) Critical: firefox security update
2008-04-16 00:00:00
(RHSA-2008:0224) Moderate: thunderbird security update
2008-04-30 00:00:00
(RHSA-2008:0223) Critical: seamonkey security update
2008-04-16 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2008-04-17 22:44:04
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:20:49
freebsd
freebsd
firefox -- javascript garbage collector vulnerability
2008-04-16 00:00:00
cvelist
cvelist
CVE-2008-1380
2008-04-17 17:00:00
nvd
nvd
CVE-2008-1380
2008-04-17 19:05:00
ubuntucve
ubuntucve
CVE-2008-1380
2008-04-17 00:00:00
prion
prion
Code injection
2008-04-17 19:05:00
cert
cert
mozilla
mozilla
Crash in JavaScript garbage collector β Mozilla
2008-04-16 00:00:00
cve
cve
CVE-2008-1380
2008-04-17 19:05:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.06
Percentile
93.6%
Related for USN-602-1