CVE-2008-2785

Published: Jun 19, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.

Affected (75)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

75 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.15
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.13
Mozilla Firefox	Version 2.0.0.14
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 3.0
Mozilla Seamonkey	Up to 1.1.10
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 alpha
Mozilla Seamonkey	Version 1.0 beta
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1.4
Mozilla Seamonkey	Version 1.1.5
Mozilla Seamonkey	Version 1.1.6
Mozilla Seamonkey	Version 1.1.7
Mozilla Seamonkey	Version 1.1.8
Mozilla Seamonkey	Version 1.1.9
Mozilla Seamonkey	Version 1.1
Mozilla Seamonkey	Version 1.1 alpha
Mozilla Seamonkey	Version 1.1 beta
Mozilla Thunderbird	Up to 2.0.0.14
Mozilla Thunderbird	Version 0.1
Mozilla Thunderbird	Version 0.2
Mozilla Thunderbird	Version 0.3
Mozilla Thunderbird	Version 0.4
Mozilla Thunderbird	Version 0.5
Mozilla Thunderbird	Version 0.6
Mozilla Thunderbird	Version 0.7
Mozilla Thunderbird	Version 0.8
Mozilla Thunderbird	Version 0.9
Mozilla Thunderbird	Version 1.0.2
Mozilla Thunderbird	Version 1.0.5
Mozilla Thunderbird	Version 1.0.6
Mozilla Thunderbird	Version 1.0.7
Mozilla Thunderbird	Version 1.0.8
Mozilla Thunderbird	Version 1.0
Mozilla Thunderbird	Version 1.5.0.10
Mozilla Thunderbird	Version 1.5.0.12
Mozilla Thunderbird	Version 1.5.0.13
Mozilla Thunderbird	Version 1.5.0.14
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.0.5
Mozilla Thunderbird	Version 1.5.0.7
Mozilla Thunderbird	Version 1.5.0.8
Mozilla Thunderbird	Version 1.5.0.9
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 2.0.0.0
Mozilla Thunderbird	Version 2.0.0.12
Mozilla Thunderbird	Version 2.0.0.4
Mozilla Thunderbird	Version 2.0.0.5
Mozilla Thunderbird	Version 2.0.0.6
Mozilla Thunderbird	Version 2.0.0.9

Related CWEs

CWE-189

References (120)

http://blog.mozilla.com/security/2008/06/18/new-security-issue-under-investigation/

Source: cve@mitre.org

http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2008-0616.html

Source: cve@mitre.org

http://secunia.com/advisories/30761

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31121

Source: cve@mitre.org

http://secunia.com/advisories/31122

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31129

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31144

Source: cve@mitre.org

http://secunia.com/advisories/31145

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31154

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31157

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31176

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31183

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31195

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31220

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31253

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31261

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31270

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31286

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31306

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31377

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31403

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/33433

Source: cve@mitre.org

http://secunia.com/advisories/34501

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200808-03.xml

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1614

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1615

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1621

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1697

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:148

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:155

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2008/mfsa2008-34.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0597.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0598.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0599.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/494504/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/494860/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/29802

Source: cve@mitre.org

http://www.securitytracker.com/id?1020336

Source: cve@mitre.org

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380767

Source: cve@mitre.org

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-623-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-626-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-626-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-629-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1873

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0977

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-08-044/

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=440230

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43167

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-2683

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9900

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00667.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00672.html

Source: cve@mitre.org

http://blog.mozilla.com/security/2008/06/18/new-security-issue-under-investigation/