Description
The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1555-1 | New iceweasel packages fix arbitrary code execution |
Debian DSA |
DSA-1558-1 | New xulrunner packages fix arbitrary code execution |
Debian DSA |
DSA-1562-1 | New iceape packages fix arbitrary code execution |
Debian DSA |
DSA-1696-1 | New icedove packages fix several vulnerabilities |
Ubuntu USN |
USN-602-1 | Firefox vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T08:17:34.702Z
Reserved: 2008-03-18T00:00:00.000Z
Link: CVE-2008-1380
No data.
Status : Modified
Published: 2008-04-17T19:05:00.000
Modified: 2026-04-23T00:35:47.467
Link: CVE-2008-1380
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
Ubuntu USN