Description

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://download.novell.com/Download?buildid=WZXONb-tqBw~Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.htmlThird Party Advisory
http://secunia.com/advisories/31984Third Party Advisory
http://secunia.com/advisories/31985Third Party Advisory
http://secunia.com/advisories/31987Third Party Advisory
http://secunia.com/advisories/32007Third Party Advisory
http://secunia.com/advisories/32010Third Party Advisory
http://secunia.com/advisories/32011Third Party Advisory
http://secunia.com/advisories/32012Third Party Advisory
http://secunia.com/advisories/32025Third Party Advisory
http://secunia.com/advisories/32042Third Party Advisory
http://secunia.com/advisories/32044Third Party Advisory
http://secunia.com/advisories/32082Third Party Advisory
http://secunia.com/advisories/32089Third Party Advisory
http://secunia.com/advisories/32092Third Party Advisory
http://secunia.com/advisories/32095Third Party Advisory
http://secunia.com/advisories/32096Third Party Advisory
http://secunia.com/advisories/32144Third Party Advisory
http://secunia.com/advisories/32185Third Party Advisory
http://secunia.com/advisories/32196Third Party Advisory
http://secunia.com/advisories/32845Third Party Advisory
http://secunia.com/advisories/33433Third Party Advisory
http://secunia.com/advisories/33434Third Party Advisory
http://secunia.com/advisories/34501Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Broken Link
http://www.debian.org/security/2008/dsa-1649Third Party Advisory
http://www.debian.org/security/2008/dsa-1669Third Party Advisory
http://www.debian.org/security/2009/dsa-1696Third Party Advisory
http://www.debian.org/security/2009/dsa-1697Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:205Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:206Third Party Advisory
http://www.mozilla.org/security/announce/2008/mfsa2008-42.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0879.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0882.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0908.htmlThird Party Advisory
http://www.securityfocus.com/bid/31346Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020916Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-645-1Third Party Advisory
http://www.ubuntu.com/usn/usn-645-2Third Party Advisory
http://www.ubuntu.com/usn/usn-647-1Third Party Advisory
http://www.vupen.com/english/advisories/2008/2661Third Party Advisory
http://www.vupen.com/english/advisories/2009/0977Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=367736Issue Tracking, Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=444608Issue Tracking, Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=445229Issue Tracking, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45355Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10206Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.htmlThird Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.htmlThird Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.htmlThird Party Advisory
http://download.novell.com/Download?buildid=WZXONb-tqBw~Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.htmlThird Party Advisory
http://secunia.com/advisories/31984Third Party Advisory
http://secunia.com/advisories/31985Third Party Advisory
http://secunia.com/advisories/31987Third Party Advisory
http://secunia.com/advisories/32007Third Party Advisory
http://secunia.com/advisories/32010Third Party Advisory

Timeline

Published: Sep 24, 2008
Last modified: Jun 16, 2026
NVD status: Modified

CVE-2008-4062