Lucene search
Ubuntu.comUB:CVE-2008-2811HistoryJul 07, 2008 - 12:00 a.m.
CVE-2008-2811
2008-07-0700:00:00
ubuntu.com
ubuntu.com
16
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.435 Medium
EPSS
Percentile
97.3%
The block reflow implementation in Mozilla Firefox before 2.0.0.15,
Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote
attackers to execute arbitrary code or cause a denial of service
(application crash) via an image whose display requires more pixels than
nscoord_MAX, related to nsBlockFrame::DrainOverflowLines.
Notes
| Author | Note |
|---|---|
| jdstrand | reduced to medium now that firefox is out |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | firefox | <Β 1.5.dfsg+1.5.0.15~prepatch080614c-0ubuntu1 | UNKNOWN |
| ubuntu | 7.04 | noarch | firefox | <Β 2.0.0.15+0nobinonly-0ubuntu0.7.4 | UNKNOWN |
| ubuntu | 7.10 | noarch | firefox | <Β 2.0.0.15+1nobinonly-0ubuntu0.7.10 | UNKNOWN |
| ubuntu | 8.04 | noarch | firefox | <Β 2.0.0.15+1nobinonly-0ubuntu0.8.04.2 | UNKNOWN |
| ubuntu | 6.06 | noarch | mozilla-thunderbird | <Β 1.5.0.13+1.5.0.15~prepatch080614d-0ubuntu0.6.06.1 | UNKNOWN |
| ubuntu | 7.04 | noarch | mozilla-thunderbird | <Β 1.5.0.13+1.5.0.15~prepatch080614d-0ubuntu0.7.04.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | seamonkey | <Β 1.1.12+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | seamonkey | <Β 1.1.11+nobinonly-0ubuntu1 | UNKNOWN |
| ubuntu | 9.04 | noarch | seamonkey | <Β 1.1.11+nobinonly-0ubuntu1 | UNKNOWN |
| ubuntu | 9.10 | noarch | seamonkey | <Β 1.1.11+nobinonly-0ubuntu1 | UNKNOWN |
Related
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:24:14
cve
cve
CVE-2008-2811
2008-07-07 23:41:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-33
2008-07-03 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2008-07-03 00:00:00
prion
prion
Design/Logic Flaw
2008-07-07 23:41:00
cert
cert
Mozilla Firefox code execution vulnerability
2008-07-02 00:00:00
mozilla
mozilla
Crash and remote code execution in block reflow β Mozilla
2008-07-01 00:00:00
openvas
openvas
Mozilla Thunderbird Multiple Vulnerabilities (Jul 2008) - Windows
2008-10-06 00:00:00
Mozilla Thunderbird Multiple Vulnerability July-08 (Windows)
2008-10-06 00:00:00
Mozilla Thunderbird Multiple Vulnerability July-08 (Linux)
2008-10-07 00:00:00
nessus
nessus
Fedora 9 : thunderbird-2.0.0.16-1.fc9 (2008-6737)
2008-08-08 00:00:00
Fedora 8 : thunderbird-2.0.0.16-1.fc8 (2008-6706)
2008-08-08 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: thunderbird-2.0.0.16-1.fc8
2008-08-07 23:56:32
[SECURITY] Fedora 9 Update: thunderbird-2.0.0.16-1.fc9
2008-08-07 23:54:31
[SECURITY] Fedora 8 Update: devhelp-0.16.1-8.fc8
2008-07-06 06:14:11
osv
osv
icedove - several vulnerabilities
2008-07-27 00:00:00
iceweasel - several vulnerabilities
2008-07-11 00:00:00
xulrunner - several vulnerabilities
2008-07-23 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2008-07-25 00:00:00
Firefox vulnerabilities
2008-07-02 00:00:00
debian
debian
[SECURITY] [DSA 1621-1] New icedove packages fix several vulnerabilities
2008-07-27 21:38:47
[SECURITY] [DSA 1607-1] New iceweasel packages fix several vulnerabilities
2008-07-11 16:11:41
[SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities
2008-07-23 20:33:58
centos
centos
seamonkey security update
2008-07-02 19:43:27
firefox security update
2008-07-02 19:45:20
seamonkey security update
2008-07-03 00:05:00
oraclelinux
oraclelinux
firefox security update
2008-07-02 00:00:00
firefox security update
2008-07-02 00:00:00
seamonkey security update
2008-07-02 00:00:00
redhat
redhat
(RHSA-2008:0569) Critical: firefox security update
2008-07-02 00:00:00
(RHSA-2008:0549) Critical: firefox security update
2008-07-02 00:00:00
(RHSA-2008:0547) Critical: seamonkey security update
2008-07-02 00:00:00
suse
suse
remote code execution in MozillaFirefox
2008-07-11 13:26:28
seebug
seebug
Mozilla Firefox 2.0.0.14εε¨ε€δΈͺθΏη¨ζΌζ΄
2008-07-03 00:00:00
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2008-08-06 00:00:00
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.435 Medium
EPSS
Percentile
97.3%
Related for UB:CVE-2008-2811