CVE-2008-5500

Summary

The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.

Impact & exploitability

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://secunia.com/advisories/33184Advisory
• http://secunia.com/advisories/33188Advisory
• http://secunia.com/advisories/33189Advisory
• http://secunia.com/advisories/33203Advisory
• http://secunia.com/advisories/33204Advisory
• http://secunia.com/advisories/33205Advisory
• http://secunia.com/advisories/33216Advisory
• http://secunia.com/advisories/33231Advisory