CVE-2008-3444

Published: Aug 4, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted but well-formed web page that contains "a simple set of legitimate HTML tags."

Affected (2)

Products: Mozilla: Firefox

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 3.0.1
Mozilla Firefox	Version 3.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/

Source: cve@mitre.org

http://www.radware.com/newsevents/pressrelease.aspx?id=6459

Source: cve@mitre.org

http://www.securityfocus.com/bid/30486

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=448564

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44169

Source: cve@mitre.org

http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.radware.com/newsevents/pressrelease.aspx?id=6459

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/30486

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=448564

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/44169

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.