CVE-2008-0016

Published: Sep 24, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

Affected (70)

Products: Mozilla: Firefox, Seamonkey

Mozilla

2 products

Firefox

Seamonkey

Configuration A

70 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.16
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 0.9_rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version 1.8
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.13
Mozilla Firefox	Version 2.0.0.14
Mozilla Firefox	Version 2.0.0.15
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0
Mozilla Seamonkey	All versions
Mozilla Seamonkey	Up to 1.1.11
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.99
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 beta
Mozilla Seamonkey	Version 1.1.10
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (82)

http://download.novell.com/Download?buildid=WZXONb-tqBw~

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html

Source: cve@mitre.org

http://secunia.com/advisories/31984

Source: cve@mitre.org

http://secunia.com/advisories/31985

Source: cve@mitre.org

http://secunia.com/advisories/32010

Source: cve@mitre.org

http://secunia.com/advisories/32012

Source: cve@mitre.org

http://secunia.com/advisories/32042

Source: cve@mitre.org

http://secunia.com/advisories/32044

Source: cve@mitre.org

http://secunia.com/advisories/32082

Source: cve@mitre.org

http://secunia.com/advisories/32092

Source: cve@mitre.org

http://secunia.com/advisories/32144

Source: cve@mitre.org

http://secunia.com/advisories/32185

Source: cve@mitre.org

http://secunia.com/advisories/32196

Source: cve@mitre.org

http://secunia.com/advisories/32845

Source: cve@mitre.org

http://secunia.com/advisories/33433

Source: cve@mitre.org

http://secunia.com/advisories/33434

Source: cve@mitre.org

http://secunia.com/advisories/34501

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1649

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1669

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1696

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1697

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:205

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:206

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2008/mfsa2008-37.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0882.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0908.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/31397

Source: cve@mitre.org

http://www.securitytracker.com/id?1020913

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-645-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-645-2

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2661

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0977

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=443288

Source: cve@mitre.org

Patch

https://bugzilla.mozilla.org/show_bug.cgi?id=451617

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11579

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html

Source: cve@mitre.org

http://download.novell.com/Download?buildid=WZXONb-tqBw~