Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5013
HistoryNov 13, 2008 - 12:00 a.m.

CVE-2008-5013

2008-11-1300:00:00
ubuntu.com
ubuntu.com
5

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.454 Medium

EPSS

Percentile

97.4%

Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not
properly check when the Flash module has been dynamically unloaded
properly, which allows remote attackers to execute arbitrary code via a
crafted SWF file that “dynamically unloads itself from an outside
JavaScript function,” which triggers an access of an expired memory
address.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.15~prepatch080614h-0ubuntu1UNKNOWN
ubuntu7.10noarchfirefox< 2.0.0.18+nobinonly-0ubuntu0.7.10UNKNOWN
ubuntu8.04noarchfirefox< 2.0.0.18+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.04noarchfirefox-3.0< 3.0.4+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchfirefox-3.0< 3.0.4+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13+1.5.0.15~prepatch080614h-0ubuntu0.6.06.1UNKNOWN
ubuntu8.04noarchseamonkey< 1.1.15+nobinonly-0ubuntu0.8.04.2UNKNOWN
ubuntu8.10noarchseamonkey< 1.1.15+nobinonly-0ubuntu0.8.10.2UNKNOWN
ubuntu7.10noarchthunderbird< 2.0.0.18+nobinonly-0ubuntu0.7.10.1UNKNOWN
ubuntu8.04noarchthunderbird< 2.0.0.18+nobinonly-0ubuntu0.8.04.1UNKNOWN
Rows per page:
1-10 of 161

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.454 Medium

EPSS

Percentile

97.4%