Description
Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
Published: 2008-09-24
Score: 10.0 Critical
EPSS: 47.8% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-1649-1 New iceweasel packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1669-1 New xulrunner packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1696-1 New icedove packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1697-1 New iceape packages fix several vulnerabilities
Ubuntu USN Ubuntu USN USN-645-1 Firefox and xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-645-2 Firefox vulnerabilities
References
Link Providers
http://download.novell.com/Download?buildid=WZXONb-tqBw~ cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html cve-icon cve-icon
http://secunia.com/advisories/31984 cve-icon cve-icon
http://secunia.com/advisories/31985 cve-icon cve-icon
http://secunia.com/advisories/32010 cve-icon cve-icon
http://secunia.com/advisories/32012 cve-icon cve-icon
http://secunia.com/advisories/32042 cve-icon cve-icon
http://secunia.com/advisories/32044 cve-icon cve-icon
http://secunia.com/advisories/32082 cve-icon cve-icon
http://secunia.com/advisories/32092 cve-icon cve-icon
http://secunia.com/advisories/32144 cve-icon cve-icon
http://secunia.com/advisories/32185 cve-icon cve-icon
http://secunia.com/advisories/32196 cve-icon cve-icon
http://secunia.com/advisories/32845 cve-icon cve-icon
http://secunia.com/advisories/33433 cve-icon cve-icon
http://secunia.com/advisories/33434 cve-icon cve-icon
http://secunia.com/advisories/34501 cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1649 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1669 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1696 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1697 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 cve-icon cve-icon
http://www.mozilla.org/security/announce/2008/mfsa2008-37.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0882.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0908.html cve-icon cve-icon
http://www.securityfocus.com/bid/31397 cve-icon cve-icon
http://www.securitytracker.com/id?1020913 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-645-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-645-2 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/2661 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/0977 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=443288 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=451617 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2008-0016 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11579 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2008-0016 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html cve-icon cve-icon
History

No history.

Subscriptions

Mozilla Firefox Seamonkey
Redhat Enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T07:32:23.631Z

Reserved: 2007-12-13T00:00:00.000Z

Link: CVE-2008-0016

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-09-24T20:37:04.453

Modified: 2026-04-23T00:35:47.467

Link: CVE-2008-0016

cve-icon Redhat

Severity : Critical

Publid Date: 2008-09-23T00:00:00Z

Links: CVE-2008-0016 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses