CVE-2008-0016
NoneCVSS
—
EPSS
43.9%
Published
Sep 24, 2008
CISA due date
—
The record
Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | iceape | 0 | 1.0.13~pre080614i-0etch1 |
| Debian:4.0 | icedove | 0 | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 |
| Debian:4.0 | iceweasel | 0 | 2.0.0.17-0etch1 |
| Debian:4.0 | xulrunner | 0 | 1.8.0.15~pre080614h-0etch1 |
| Red Hat:enterprise_linux:2.1::as | seamonkey | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-chat | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-dom-inspector | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-js-debugger | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-mail | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nspr | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nspr-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nss | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nss-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-chat | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-dom-inspector | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-js-debugger | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-mail | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nspr | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nspr-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nss | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nss-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-chat | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-dom-inspector | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-js-debugger | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-mail | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nspr | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nspr-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nss | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nss-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-chat | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-js-debugger | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-mail | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nspr | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nspr-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nss | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nss-devel | 0 | 0:1.0.9-0.20.el2 |
| Red Hat:enterprise_linux:3::as | seamonkey | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-chat | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-debuginfo | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-dom-inspector | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-js-debugger | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-mail | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-chat | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-debuginfo | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-dom-inspector | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-js-debugger | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-mail | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-chat | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-debuginfo | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-dom-inspector | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-js-debugger | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-mail | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-chat | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-debuginfo | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-js-debugger | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-mail | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss-devel | 0 | 0:1.0.9-0.24.el3 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.5.0.12-16.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.5.0.12-16.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.5.0.12-16.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.5.0.12-16.el4 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.5.0.12-16.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.5.0.12-16.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.10-0.10.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.9-26.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.5.0.12-16.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.5.0.12-16.el4 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:2.0.0.17-1.el5 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:2.0.0.17-1.el5 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:2.0.0.17-1.el5 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:2.0.0.17-1.el5 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 91.1.1-1.1 |
Related vulnerabilities
- CVE-2008-4582 Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x… Also affects iceape
- CVE-2008-2798 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird… Also affects iceape
- CVE-2007-4041 Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow… Also affects iceape
- CVE-2007-2292 CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox… Also affects iceape
- CVE-2009-1169 The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and… Also affects seamonkey
- CVE-2007-1562 The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3… Also affects seamonkey
- CVE-2007-0009 Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services… Also affects seamonkey
- CVE-2007-0981 Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and… Also affects seamonkey