CVE-2008-1380

Published: Apr 17, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.

Affected (49)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

49 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.13
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 2.0 beta1
Mozilla Firefox	Version 2.0 rc2
Mozilla Firefox	Version 2.0 rc3
Mozilla Seamonkey	Up to 1.1.9
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.99
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1.4
Mozilla Seamonkey	Version 1.1.5
Mozilla Seamonkey	Version 1.1.6
Mozilla Seamonkey	Version 1.1.7
Mozilla Seamonkey	Version 1.1.8
Mozilla Seamonkey	Version 1.1
Mozilla Thunderbird	Up to 2.0.0.13
Mozilla Thunderbird	Version 2.0.0.0
Mozilla Thunderbird	Version 2.0.0.11
Mozilla Thunderbird	Version 2.0.0.12
Mozilla Thunderbird	Version 2.0.0.1
Mozilla Thunderbird	Version 2.0.0.2
Mozilla Thunderbird	Version 2.0.0.3
Mozilla Thunderbird	Version 2.0.0.4
Mozilla Thunderbird	Version 2.0.0.5
Mozilla Thunderbird	Version 2.0.0.6
Mozilla Thunderbird	Version 2.0.0.8
Mozilla Thunderbird	Version 2.0.0.9

Related CWEs

CWE-399

References (96)

http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html

Source: secalert@redhat.com

http://secunia.com/advisories/29787

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/29793

Source: secalert@redhat.com

http://secunia.com/advisories/29828

Source: secalert@redhat.com

http://secunia.com/advisories/29860

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29883

Source: secalert@redhat.com

http://secunia.com/advisories/29908

Source: secalert@redhat.com

http://secunia.com/advisories/29911

Source: secalert@redhat.com

http://secunia.com/advisories/29912

Source: secalert@redhat.com

http://secunia.com/advisories/29947

Source: secalert@redhat.com

http://secunia.com/advisories/30012

Source: secalert@redhat.com

http://secunia.com/advisories/30029

Source: secalert@redhat.com

http://secunia.com/advisories/30192

Source: secalert@redhat.com

http://secunia.com/advisories/30327

Source: secalert@redhat.com

http://secunia.com/advisories/30620

Source: secalert@redhat.com

http://secunia.com/advisories/30717

Source: secalert@redhat.com

http://secunia.com/advisories/31023

Source: secalert@redhat.com

http://secunia.com/advisories/31377

Source: secalert@redhat.com

http://secunia.com/advisories/33434

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200808-03.xml

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.391769

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1555

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1558

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1562

Source: secalert@redhat.com

http://www.debian.org/security/2009/dsa-1696

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/441529

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:110

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2008/mfsa2008-20.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2008_13_sr.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0222.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0223.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0224.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/491838/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/28818

Source: secalert@redhat.com

http://www.securitytracker.com/id?1019873

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-602-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1251/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1793/references

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=425576

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/41857

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10752

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00407.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00463.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html