9.3

CVE-2008-0017

The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version >= 2.0 < 2.0.0.18
Mozilla ≫ Firefox Version >= 3.0 < 3.0.4
Mozilla ≫ Seamonkey Version >= 1.0 < 1.1.13
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version7.10
Canonical ≫ Ubuntu Linux Version8.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version8.10
Debian ≫ Debian Linux Version4.0
Debian ≫ Debian Linux Version5.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.68% 0.938
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/33433
Third Party Advisory
http://www.debian.org/security/2009/dsa-1697
Third Party Advisory
http://secunia.com/advisories/34501
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Broken Link
http://www.vupen.com/english/advisories/2009/0977
Third Party Advisory
http://secunia.com/advisories/32845
Third Party Advisory
http://www.debian.org/security/2008/dsa-1669
Third Party Advisory
http://secunia.com/advisories/32684
Third Party Advisory
http://secunia.com/advisories/32693
Third Party Advisory
http://secunia.com/advisories/32714
Third Party Advisory
http://secunia.com/advisories/32721
Third Party Advisory
http://secunia.com/advisories/32778
Third Party Advisory
http://secunia.com/advisories/32853
Third Party Advisory
http://ubuntu.com/usn/usn-667-1
Third Party Advisory
http://www.debian.org/security/2008/dsa-1671
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-319A.html
Third Party Advisory
US Government Resource
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
Third Party Advisory
http://secunia.com/advisories/32694
Third Party Advisory
http://secunia.com/advisories/32695
Third Party Advisory
http://secunia.com/advisories/32713
Third Party Advisory
http://www.iss.net/threats/311.html
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2008:228
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:230
Third Party Advisory
http://www.mozilla.org/security/announce/2008/mfsa2008-54.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0977.html
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0978.html
Third Party Advisory
http://www.securityfocus.com/bid/32281
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1021185
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/3146
Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=443299
Vendor Advisory
Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11005
Third Party Advisory