CVE - CVE-2008-1380 (under review)

About CVE

Terminology
Documents
FAQs
CVE List

About CVE Identifiers
Obtain a CVE Identifier
Search CVE
Search NVD
CVE In Use

CVE Adoption
CVE-Compatible Products
NVD for CVE Fix Information
More . . .
News & Events

Calendar
Free Newsletter
Community

CVE Editorial Board
Sponsor
Contact Us

Search the Site

CVE List

Data Updates & RSS Feeds
Reference Key/Maps
Data Sources
Versions
Search Tips
Editor's Commentary
Obtain a CVE Identifier
Editorial Policies
About CVE Identifiers

Items of Interest

Terminology
NVD

CVE-ID
CVE-2008-1380 (under review)	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20080508 FLEA-2008-0008-1 firefox URL:http://www.securityfocus.com/archive/1/archive/1/491838/100/0/threaded MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=425576 CONFIRM:http://www.mozilla.org/security/announce/2008/mfsa2008-20.html DEBIAN:DSA-1555 URL:http://www.debian.org/security/2008/dsa-1555 DEBIAN:DSA-1558 URL:http://www.debian.org/security/2008/dsa-1558 DEBIAN:DSA-1562 URL:http://www.debian.org/security/2008/dsa-1562 DEBIAN:DSA-1696 URL:http://www.debian.org/security/2009/dsa-1696 FEDORA:FEDORA-2008-3231 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00407.html FEDORA:FEDORA-2008-3264 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00463.html FEDORA:FEDORA-2008-3519 URL:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html FEDORA:FEDORA-2008-3557 URL:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html GENTOO:GLSA-200808-03 URL:http://security.gentoo.org/glsa/glsa-200808-03.xml GENTOO:GLSA-200805-18 URL:http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml MANDRIVA:MDVSA-2008:110 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:110 REDHAT:RHSA-2008:0222 URL:http://www.redhat.com/support/errata/RHSA-2008-0222.html REDHAT:RHSA-2008:0223 URL:http://www.redhat.com/support/errata/RHSA-2008-0223.html REDHAT:RHSA-2008:0224 URL:http://www.redhat.com/support/errata/RHSA-2008-0224.html SLACKWARE:SSA:2008-108-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.391769 SLACKWARE:SSA:2008-191-03 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 SUNALERT:238492 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 SUSE:SUSE-SR:2008:011 URL:http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html SUSE:SUSE-SR:2008:013 URL:http://www.novell.com/linux/security/advisories/2008_13_sr.html UBUNTU:USN-602-1 URL:http://www.ubuntu.com/usn/usn-602-1 CERT-VN:VU#441529 URL:http://www.kb.cert.org/vuls/id/441529 BID:28818 URL:http://www.securityfocus.com/bid/28818 VUPEN:ADV-2008-1251 URL:http://www.frsirt.com/english/advisories/2008/1251/references VUPEN:ADV-2008-1793 URL:http://www.frsirt.com/english/advisories/2008/1793/references SECTRACK:1019873 URL:http://www.securitytracker.com/id?1019873 SECUNIA:29787 URL:http://secunia.com/advisories/29787 SECUNIA:29860 URL:http://secunia.com/advisories/29860 SECUNIA:29912 URL:http://secunia.com/advisories/29912 SECUNIA:29908 URL:http://secunia.com/advisories/29908 SECUNIA:29883 URL:http://secunia.com/advisories/29883 SECUNIA:29911 URL:http://secunia.com/advisories/29911 SECUNIA:29947 URL:http://secunia.com/advisories/29947 SECUNIA:29793 URL:http://secunia.com/advisories/29793 SECUNIA:29828 URL:http://secunia.com/advisories/29828 SECUNIA:30012 URL:http://secunia.com/advisories/30012 SECUNIA:30029 URL:http://secunia.com/advisories/30029 SECUNIA:30327 URL:http://secunia.com/advisories/30327 SECUNIA:30717 URL:http://secunia.com/advisories/30717 SECUNIA:31023 URL:http://secunia.com/advisories/31023 SECUNIA:31377 URL:http://secunia.com/advisories/31377 SECUNIA:30192 URL:http://secunia.com/advisories/30192 SECUNIA:30620 URL:http://secunia.com/advisories/30620 SECUNIA:33434 URL:http://secunia.com/advisories/33434 XF:mozilla-garbage-code-execution(41857) URL:http://xforce.iss.net/xforce/xfdb/41857
Status
Candidate	This CVE Identifier has "Candidate" status and must be reviewed and accepted by the CVE Editorial Board before it can be updated to official "Entry" status on the CVE List. It may be modified or even rejected in the future.
Phase
Assigned (20080318)
Votes

Comments

Candidate assigned on 20080318 and proposed on N/A
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org