Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-2785

Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.

Published

2008-06-19T21:41:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-189

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mozilla	firefox	≤ 2.0.0.15	Yes
Application	mozilla	firefox	2.0	Yes
Application	mozilla	firefox	2.0.0.1	Yes
Application	mozilla	firefox	2.0.0.2	Yes
Application	mozilla	firefox	2.0.0.3	Yes
Application	mozilla	firefox	2.0.0.4	Yes
Application	mozilla	firefox	2.0.0.5	Yes
Application	mozilla	firefox	2.0.0.6	Yes
Application	mozilla	firefox	2.0.0.7	Yes
Application	mozilla	firefox	2.0.0.8	Yes
Application	mozilla	firefox	2.0.0.9	Yes
Application	mozilla	firefox	2.0.0.10	Yes
Application	mozilla	firefox	2.0.0.11	Yes
Application	mozilla	firefox	2.0.0.12	Yes
Application	mozilla	firefox	2.0.0.13	Yes
Application	mozilla	firefox	2.0.0.14	Yes
Application	mozilla	firefox	3.0	Yes
Application	mozilla	seamonkey	≤ 1.1.10	Yes
Application	mozilla	seamonkey	1.0	Yes
Application	mozilla	seamonkey	1.0	Yes
Application	mozilla	seamonkey	1.0	Yes
Application	mozilla	seamonkey	1.0.1	Yes
Application	mozilla	seamonkey	1.0.2	Yes
Application	mozilla	seamonkey	1.0.3	Yes
Application	mozilla	seamonkey	1.0.4	Yes
Application	mozilla	seamonkey	1.0.5	Yes
Application	mozilla	seamonkey	1.0.6	Yes
Application	mozilla	seamonkey	1.0.7	Yes
Application	mozilla	seamonkey	1.0.8	Yes
Application	mozilla	seamonkey	1.0.9	Yes
Application	mozilla	seamonkey	1.1	Yes
Application	mozilla	seamonkey	1.1	Yes
Application	mozilla	seamonkey	1.1	Yes
Application	mozilla	seamonkey	1.1.1	Yes
Application	mozilla	seamonkey	1.1.2	Yes
Application	mozilla	seamonkey	1.1.3	Yes
Application	mozilla	seamonkey	1.1.4	Yes
Application	mozilla	seamonkey	1.1.5	Yes
Application	mozilla	seamonkey	1.1.6	Yes
Application	mozilla	seamonkey	1.1.7	Yes
Application	mozilla	seamonkey	1.1.8	Yes
Application	mozilla	seamonkey	1.1.9	Yes
Application	mozilla	thunderbird	≤ 2.0.0.14	Yes
Application	mozilla	thunderbird	0.1	Yes
Application	mozilla	thunderbird	0.2	Yes
Application	mozilla	thunderbird	0.3	Yes
Application	mozilla	thunderbird	0.4	Yes
Application	mozilla	thunderbird	0.5	Yes
Application	mozilla	thunderbird	0.6	Yes
Application	mozilla	thunderbird	0.7	Yes
Application	mozilla	thunderbird	0.8	Yes
Application	mozilla	thunderbird	0.9	Yes
Application	mozilla	thunderbird	1.0	Yes
Application	mozilla	thunderbird	1.0.2	Yes
Application	mozilla	thunderbird	1.0.5	Yes
Application	mozilla	thunderbird	1.0.6	Yes
Application	mozilla	thunderbird	1.0.7	Yes
Application	mozilla	thunderbird	1.0.8	Yes
Application	mozilla	thunderbird	1.5	Yes
Application	mozilla	thunderbird	1.5.0.2	Yes
Application	mozilla	thunderbird	1.5.0.4	Yes
Application	mozilla	thunderbird	1.5.0.5	Yes
Application	mozilla	thunderbird	1.5.0.7	Yes
Application	mozilla	thunderbird	1.5.0.8	Yes
Application	mozilla	thunderbird	1.5.0.9	Yes
Application	mozilla	thunderbird	1.5.0.10	Yes
Application	mozilla	thunderbird	1.5.0.12	Yes
Application	mozilla	thunderbird	1.5.0.13	Yes
Application	mozilla	thunderbird	1.5.0.14	Yes
Application	mozilla	thunderbird	2.0.0.0	Yes
Application	mozilla	thunderbird	2.0.0.4	Yes
Application	mozilla	thunderbird	2.0.0.5	Yes
Application	mozilla	thunderbird	2.0.0.6	Yes
Application	mozilla	thunderbird	2.0.0.9	Yes
Application	mozilla	thunderbird	2.0.0.12	Yes

References

http://blog.mozilla.com/security/2008/06/18/new-security-issue-under-investigation/ ([email protected])
http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30 ([email protected])
http://rhn.redhat.com/errata/RHSA-2008-0616.html ([email protected])
http://secunia.com/advisories/30761 Vendor Advisory ([email protected])
http://secunia.com/advisories/31121 ([email protected])
http://secunia.com/advisories/31122 Vendor Advisory ([email protected])
http://secunia.com/advisories/31129 Vendor Advisory ([email protected])
http://secunia.com/advisories/31144 ([email protected])
http://secunia.com/advisories/31145 Vendor Advisory ([email protected])
http://secunia.com/advisories/31154 Vendor Advisory ([email protected])
http://secunia.com/advisories/31157 Vendor Advisory ([email protected])
http://secunia.com/advisories/31176 Vendor Advisory ([email protected])
http://secunia.com/advisories/31183 Vendor Advisory ([email protected])
http://secunia.com/advisories/31195 Vendor Advisory ([email protected])
http://secunia.com/advisories/31220 Vendor Advisory ([email protected])
http://secunia.com/advisories/31253 Vendor Advisory ([email protected])
http://secunia.com/advisories/31261 Vendor Advisory ([email protected])
http://secunia.com/advisories/31270 Vendor Advisory ([email protected])
http://secunia.com/advisories/31286 Vendor Advisory ([email protected])
http://secunia.com/advisories/31306 Vendor Advisory ([email protected])
http://secunia.com/advisories/31377 Vendor Advisory ([email protected])
http://secunia.com/advisories/31403 Vendor Advisory ([email protected])
http://secunia.com/advisories/33433 ([email protected])
http://secunia.com/advisories/34501 ([email protected])
http://security.gentoo.org/glsa/glsa-200808-03.xml ([email protected])
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 ([email protected])
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238 ([email protected])
http://www.debian.org/security/2008/dsa-1614 ([email protected])
http://www.debian.org/security/2008/dsa-1615 ([email protected])
http://www.debian.org/security/2008/dsa-1621 ([email protected])
http://www.debian.org/security/2009/dsa-1697 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2008:148 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 ([email protected])
http://www.mozilla.org/security/announce/2008/mfsa2008-34.html Patch, Vendor Advisory ([email protected])
http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400 ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0597.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0598.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0599.html ([email protected])
http://www.securityfocus.com/archive/1/494504/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/494860/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/29802 ([email protected])
http://www.securitytracker.com/id?1020336 ([email protected])
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380767 ([email protected])
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974 ([email protected])
http://www.ubuntu.com/usn/usn-623-1 ([email protected])
http://www.ubuntu.com/usn/usn-626-1 ([email protected])
http://www.ubuntu.com/usn/usn-626-2 ([email protected])
http://www.ubuntu.com/usn/usn-629-1 ([email protected])
http://www.vupen.com/english/advisories/2008/1873 ([email protected])
http://www.vupen.com/english/advisories/2009/0977 ([email protected])
http://www.zerodayinitiative.com/advisories/ZDI-08-044/ ([email protected])
https://bugzilla.mozilla.org/show_bug.cgi?id=440230 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/43167 ([email protected])
https://issues.rpath.com/browse/RPL-2683 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9900 ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00667.html ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00672.html ([email protected])
http://blog.mozilla.com/security/2008/06/18/new-security-issue-under-investigation/ (af854a3a-2127-422b-91ae-364da2661108)
http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30 (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2008-0616.html (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30761 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31121 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31122 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31129 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31144 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31145 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31154 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31157 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31176 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31183 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31195 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31220 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31253 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31261 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31270 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31286 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31306 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31377 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31403 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/33433 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/34501 (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200808-03.xml (af854a3a-2127-422b-91ae-364da2661108)
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 (af854a3a-2127-422b-91ae-364da2661108)
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2008/dsa-1614 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2008/dsa-1615 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2008/dsa-1621 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2009/dsa-1697 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2008:148 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/2008/mfsa2008-34.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0597.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0598.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0599.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/494504/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/494860/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/29802 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1020336 (af854a3a-2127-422b-91ae-364da2661108)
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380767 (af854a3a-2127-422b-91ae-364da2661108)
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-623-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-626-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-626-2 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-629-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1873 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/0977 (af854a3a-2127-422b-91ae-364da2661108)
http://www.zerodayinitiative.com/advisories/ZDI-08-044/ (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.mozilla.org/show_bug.cgi?id=440230 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/43167 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-2683 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9900 (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00667.html (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00672.html (af854a3a-2127-422b-91ae-364da2661108)