Vulnerability-Lookup

RHSA-2008_0976

Vulnerability from csaf_redhat - Published: 2008-11-20 01:07 - Updated: 2024-11-22 02:22

Summary

Red Hat Security Advisory: thunderbird security update

Severity

Moderate

Notes

Topic: Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details: Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. (CVE-2008-5014, CVE-2008-5016, CVE-2008-5017, CVE-2008-5018, CVE-2008-5021) Several flaws were found in the way malformed HTML mail content was processed. An HTML mail message containing specially-crafted content could potentially trick a Thunderbird user into surrendering sensitive information. (CVE-2008-5012, CVE-2008-5022, CVE-2008-5024) All Thunderbird users should upgrade to these updated packages, which resolve these issues.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2008-5012

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.

Vendor Fix Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188 https://access.redhat.com/errata/RHSA-2008:0976

CVE-2008-5014

jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.

CVE-2008-5016

The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.

CVE-2008-5017

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors.

CVE-2008-5018

The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient class checking" in the Date class.

CVE-2008-5021

nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.

CVE-2008-5022

The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.

CVE-2008-5024

Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.

CVE-2008-5052

The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.

References

URL

Category

	https://access.redhat.com/errata/RHSA-2008:0976	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470864	external
	https://bugzilla.redhat.com/show_bug.cgi?id=470873	external
	https://bugzilla.redhat.com/show_bug.cgi?id=470881	external
	https://bugzilla.redhat.com/show_bug.cgi?id=470883	external
	https://bugzilla.redhat.com/show_bug.cgi?id=470884	external
	https://bugzilla.redhat.com/show_bug.cgi?id=470894	external
	https://bugzilla.redhat.com/show_bug.cgi?id=470895	external
	https://bugzilla.redhat.com/show_bug.cgi?id=470902	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2008-5012	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470864	external
	https://www.cve.org/CVERecord?id=CVE-2008-5012	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5012	external
	https://access.redhat.com/security/cve/CVE-2008-5014	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470873	external
	https://www.cve.org/CVERecord?id=CVE-2008-5014	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5014	external
	https://access.redhat.com/security/cve/CVE-2008-5016	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470881	external
	https://www.cve.org/CVERecord?id=CVE-2008-5016	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5016	external
	https://access.redhat.com/security/cve/CVE-2008-5017	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470883	external
	https://www.cve.org/CVERecord?id=CVE-2008-5017	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5017	external
	https://access.redhat.com/security/cve/CVE-2008-5018	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470884	external
	https://www.cve.org/CVERecord?id=CVE-2008-5018	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5018	external
	https://access.redhat.com/security/cve/CVE-2008-5021	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470894	external
	https://www.cve.org/CVERecord?id=CVE-2008-5021	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5021	external
	https://access.redhat.com/security/cve/CVE-2008-5022	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470895	external
	https://www.cve.org/CVERecord?id=CVE-2008-5022	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5022	external
	https://access.redhat.com/security/cve/CVE-2008-5024	self
	https://bugzilla.redhat.com/show_bug.cgi?id=470902	external
	https://www.cve.org/CVERecord?id=CVE-2008-5024	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5024	external
	https://access.redhat.com/security/cve/CVE-2008-5052	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1618336	external
	https://www.cve.org/CVERecord?id=CVE-2008-5052	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-5052	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated thunderbird packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4 and 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML mail content.\nAn HTML mail message containing malicious content could cause Thunderbird\nto crash or, potentially, execute arbitrary code as the user running\nThunderbird. (CVE-2008-5014, CVE-2008-5016, CVE-2008-5017, CVE-2008-5018,\nCVE-2008-5021)\n\nSeveral flaws were found in the way malformed HTML mail content was\nprocessed. An HTML mail message containing specially-crafted content could\npotentially trick a Thunderbird user into surrendering sensitive\ninformation. (CVE-2008-5012, CVE-2008-5022, CVE-2008-5024)\n\nAll Thunderbird users should upgrade to these updated packages, which\nresolve these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0976",
        "url": "https://access.redhat.com/errata/RHSA-2008:0976"
      },
      {
        "category": "external",
        "summary": "470864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470864"
      },
      {
        "category": "external",
        "summary": "470873",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470873"
      },
      {
        "category": "external",
        "summary": "470881",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470881"
      },
      {
        "category": "external",
        "summary": "470883",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470883"
      },
      {
        "category": "external",
        "summary": "470884",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470884"
      },
      {
        "category": "external",
        "summary": "470894",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470894"
      },
      {
        "category": "external",
        "summary": "470895",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470895"
      },
      {
        "category": "external",
        "summary": "470902",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470902"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0976.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-22T02:22:11+00:00",
      "generator": {
        "date": "2024-11-22T02:22:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2008:0976",
      "initial_release_date": "2008-11-20T01:07:00+00:00",
      "revision_history": [
        {
          "date": "2008-11-20T01:07:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-11-19T20:09:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T02:22:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
                  "product_id": "5Server-DPAS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_productivity:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-17.el4.ia64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-17.el4.ia64",
                  "product_id": "thunderbird-0:1.5.0.12-17.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-17.el4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-17.el4?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-17.el4.src",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-17.el4.src",
                  "product_id": "thunderbird-0:1.5.0.12-17.el4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-17.el4?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:2.0.0.18-1.el5.src",
                "product": {
                  "name": "thunderbird-0:2.0.0.18-1.el5.src",
                  "product_id": "thunderbird-0:2.0.0.18-1.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@2.0.0.18-1.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-17.el4.x86_64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-17.el4.x86_64",
                  "product_id": "thunderbird-0:1.5.0.12-17.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-17.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-17.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:2.0.0.18-1.el5.x86_64",
                "product": {
                  "name": "thunderbird-0:2.0.0.18-1.el5.x86_64",
                  "product_id": "thunderbird-0:2.0.0.18-1.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@2.0.0.18-1.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
                  "product_id": "thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@2.0.0.18-1.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-17.el4.i386",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-17.el4.i386",
                  "product_id": "thunderbird-0:1.5.0.12-17.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-17.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-17.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:2.0.0.18-1.el5.i386",
                "product": {
                  "name": "thunderbird-0:2.0.0.18-1.el5.i386",
                  "product_id": "thunderbird-0:2.0.0.18-1.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@2.0.0.18-1.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
                  "product_id": "thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@2.0.0.18-1.el5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-17.el4.ppc",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-17.el4.ppc",
                  "product_id": "thunderbird-0:1.5.0.12-17.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-17.el4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-17.el4?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-17.el4.s390x",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-17.el4.s390x",
                  "product_id": "thunderbird-0:1.5.0.12-17.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-17.el4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-17.el4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-17.el4.s390",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-17.el4.s390",
                  "product_id": "thunderbird-0:1.5.0.12-17.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-17.el4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-17.el4?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-17.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-17.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-17.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-17.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-17.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-17.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-17.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-17.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-17.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-17.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-17.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-17.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-17.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-17.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-17.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-17.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-17.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-17.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-17.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-17.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-17.el4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:2.0.0.18-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-0:2.0.0.18-1.el5.i386"
        },
        "product_reference": "thunderbird-0:2.0.0.18-1.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:2.0.0.18-1.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-0:2.0.0.18-1.el5.src"
        },
        "product_reference": "thunderbird-0:2.0.0.18-1.el5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:2.0.0.18-1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64"
        },
        "product_reference": "thunderbird-0:2.0.0.18-1.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:2.0.0.18-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:2.0.0.18-1.el5.i386 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386"
        },
        "product_reference": "thunderbird-0:2.0.0.18-1.el5.i386",
        "relates_to_product_reference": "5Server-DPAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:2.0.0.18-1.el5.src as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src"
        },
        "product_reference": "thunderbird-0:2.0.0.18-1.el5.src",
        "relates_to_product_reference": "5Server-DPAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:2.0.0.18-1.el5.x86_64 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64"
        },
        "product_reference": "thunderbird-0:2.0.0.18-1.el5.x86_64",
        "relates_to_product_reference": "5Server-DPAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:2.0.0.18-1.el5.i386 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
        "relates_to_product_reference": "5Server-DPAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
        "relates_to_product_reference": "5Server-DPAS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-5012",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker.  NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Image stealing via canvas and HTTP redirect",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5012"
        },
        {
          "category": "external",
          "summary": "RHBZ#470864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5012"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla Image stealing via canvas and HTTP redirect"
    },
    {
      "cve": "CVE-2008-5014",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470873"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crash and remote code execution via __proto__ tampering",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5014"
        },
        {
          "category": "external",
          "summary": "RHBZ#470873",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470873"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5014",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5014"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5014",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5014"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crash and remote code execution via __proto__ tampering"
    },
    {
      "cve": "CVE-2008-5016",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470881"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crash with evidence of memory corruption",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5016"
        },
        {
          "category": "external",
          "summary": "RHBZ#470881",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470881"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5016",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5016"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5016",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5016"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crash with evidence of memory corruption"
    },
    {
      "cve": "CVE-2008-5017",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470883"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crash with evidence of memory corruption",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5017"
        },
        {
          "category": "external",
          "summary": "RHBZ#470883",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470883"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5017",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5017"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5017",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5017"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crash with evidence of memory corruption"
    },
    {
      "cve": "CVE-2008-5018",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470884"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to \"insufficient class checking\" in the Date class.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crash with evidence of memory corruption",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5018"
        },
        {
          "category": "external",
          "summary": "RHBZ#470884",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470884"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5018",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5018"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5018",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5018"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crash with evidence of memory corruption"
    },
    {
      "cve": "CVE-2008-5021",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crash and remote code execution in nsFrameManager",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5021"
        },
        {
          "category": "external",
          "summary": "RHBZ#470894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5021",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5021"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5021",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5021"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crash and remote code execution in nsFrameManager"
    },
    {
      "cve": "CVE-2008-5022",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470895"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nsXMLHttpRequest:: NotifyEventListeners() same-origin violation",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5022"
        },
        {
          "category": "external",
          "summary": "RHBZ#470895",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470895"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5022",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5022"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5022",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5022"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nsXMLHttpRequest:: NotifyEventListeners() same-origin violation"
    },
    {
      "cve": "CVE-2008-5024",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla parsing error in E4X default namespace",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5024"
        },
        {
          "category": "external",
          "summary": "RHBZ#470902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470902"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5024",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5024"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5024",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5024"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Mozilla parsing error in E4X default namespace"
    },
    {
      "cve": "CVE-2008-5052",
      "discovery_date": "2008-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-17.el4.src",
          "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-17.el4.src",
          "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-17.el4.src",
          "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
          "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-0:2.0.0.18-1.el5.src",
          "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
          "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
          "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5052"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5052",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5052"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5052",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5052"
        }
      ],
      "release_date": "2008-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-20T01:07:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188\n",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-17.el4.src",
            "4AS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-17.el4.src",
            "4ES:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-17.el4.src",
            "4WS:thunderbird-0:1.5.0.12-17.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-17.el4.x86_64",
            "5Client:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-0:2.0.0.18-1.el5.src",
            "5Client:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Client:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.src",
            "5Server-DPAS:thunderbird-0:2.0.0.18-1.el5.x86_64",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.i386",
            "5Server-DPAS:thunderbird-debuginfo-0:2.0.0.18-1.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0976"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    }
  ]
}

CVE-2008-5024 (GCVE-0-2008-5024)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2009/dsa-1697	vendor-advisoryx_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=453915	x_refsource_MISC
	http://www.debian.org/security/2008/dsa-1671	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/32713	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/0977	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/32695	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2008/dsa-1669	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32778	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/33433	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32694	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32721	third-party-advisoryx_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/32853	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1696	vendor-advisoryx_refsource_DEBIAN
	http://www.securitytracker.com/id?1021192	vdb-entryx_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/32715	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32693	third-party-advisoryx_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32845	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/33434	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32798	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32684	third-party-advisoryx_refsource_SECUNIA
	http://ubuntu.com/usn/usn-667-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/32714	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34501	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:17.153Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "name": "DSA-1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1697"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=453915"
          },
          {
            "name": "DSA-1671",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1671"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "name": "FEDORA-2008-9667",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
          },
          {
            "name": "32713",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32713"
          },
          {
            "name": "RHSA-2008:0977",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
          },
          {
            "name": "MDVSA-2008:230",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
          },
          {
            "name": "ADV-2009-0977",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0977"
          },
          {
            "name": "32695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32695"
          },
          {
            "name": "RHSA-2008:0978",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
          },
          {
            "name": "DSA-1669",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1669"
          },
          {
            "name": "32778",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32778"
          },
          {
            "name": "RHSA-2008:0976",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
          },
          {
            "name": "FEDORA-2008-9669",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
          },
          {
            "name": "33433",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33433"
          },
          {
            "name": "256408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "32694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32694"
          },
          {
            "name": "32721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32721"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "name": "32853",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32853"
          },
          {
            "name": "DSA-1696",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1696"
          },
          {
            "name": "1021192",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021192"
          },
          {
            "name": "oval:org.mitre.oval:def:9063",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9063"
          },
          {
            "name": "32715",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32715"
          },
          {
            "name": "32693",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32693"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-58.html"
          },
          {
            "name": "MDVSA-2008:228",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
          },
          {
            "name": "32845",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32845"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          },
          {
            "name": "33434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33434"
          },
          {
            "name": "32798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32798"
          },
          {
            "name": "32684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32684"
          },
          {
            "name": "USN-667-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-667-1"
          },
          {
            "name": "32714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32714"
          },
          {
            "name": "34501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34501"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "name": "DSA-1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1697"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=453915"
        },
        {
          "name": "DSA-1671",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1671"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "name": "FEDORA-2008-9667",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
        },
        {
          "name": "32713",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32713"
        },
        {
          "name": "RHSA-2008:0977",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
        },
        {
          "name": "MDVSA-2008:230",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
        },
        {
          "name": "ADV-2009-0977",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0977"
        },
        {
          "name": "32695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32695"
        },
        {
          "name": "RHSA-2008:0978",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
        },
        {
          "name": "DSA-1669",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1669"
        },
        {
          "name": "32778",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32778"
        },
        {
          "name": "RHSA-2008:0976",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
        },
        {
          "name": "FEDORA-2008-9669",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
        },
        {
          "name": "33433",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33433"
        },
        {
          "name": "256408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "32694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32694"
        },
        {
          "name": "32721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32721"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "name": "32853",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32853"
        },
        {
          "name": "DSA-1696",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1696"
        },
        {
          "name": "1021192",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021192"
        },
        {
          "name": "oval:org.mitre.oval:def:9063",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9063"
        },
        {
          "name": "32715",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32715"
        },
        {
          "name": "32693",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32693"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-58.html"
        },
        {
          "name": "MDVSA-2008:228",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
        },
        {
          "name": "32845",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32845"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        },
        {
          "name": "33434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33434"
        },
        {
          "name": "32798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32798"
        },
        {
          "name": "32684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32684"
        },
        {
          "name": "USN-667-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-667-1"
        },
        {
          "name": "32714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32714"
        },
        {
          "name": "34501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34501"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5024",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:17.153Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5014 (GCVE-0-2008-5014)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://secunia.com/advisories/32011	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2009/dsa-1697	vendor-advisoryx_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=436741	x_refsource_MISC
	http://www.debian.org/security/2008/dsa-1671	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/0977	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/32695	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021182	vdb-entryx_refsource_SECTRACK
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2008/dsa-1669	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32778	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/33433	third-party-advisoryx_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32694	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32721	third-party-advisoryx_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/32853	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1696	vendor-advisoryx_refsource_DEBIAN
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/32715	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32693	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32845	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/33434	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32798	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32684	third-party-advisoryx_refsource_SECUNIA
	http://ubuntu.com/usn/usn-667-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/32714	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34501	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:17.046Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "32011",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32011"
          },
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "name": "DSA-1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1697"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=436741"
          },
          {
            "name": "DSA-1671",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1671"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "name": "FEDORA-2008-9667",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
          },
          {
            "name": "RHSA-2008:0977",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
          },
          {
            "name": "MDVSA-2008:230",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
          },
          {
            "name": "ADV-2009-0977",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0977"
          },
          {
            "name": "32695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32695"
          },
          {
            "name": "1021182",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021182"
          },
          {
            "name": "RHSA-2008:0978",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
          },
          {
            "name": "DSA-1669",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1669"
          },
          {
            "name": "32778",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32778"
          },
          {
            "name": "RHSA-2008:0976",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
          },
          {
            "name": "FEDORA-2008-9669",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
          },
          {
            "name": "33433",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33433"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-50.html"
          },
          {
            "name": "256408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "32694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32694"
          },
          {
            "name": "32721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32721"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "name": "32853",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32853"
          },
          {
            "name": "DSA-1696",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1696"
          },
          {
            "name": "oval:org.mitre.oval:def:9157",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9157"
          },
          {
            "name": "32715",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32715"
          },
          {
            "name": "32693",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32693"
          },
          {
            "name": "MDVSA-2008:228",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
          },
          {
            "name": "32845",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32845"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          },
          {
            "name": "33434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33434"
          },
          {
            "name": "32798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32798"
          },
          {
            "name": "32684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32684"
          },
          {
            "name": "USN-667-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-667-1"
          },
          {
            "name": "32714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32714"
          },
          {
            "name": "34501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34501"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "32011",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32011"
        },
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "name": "DSA-1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1697"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=436741"
        },
        {
          "name": "DSA-1671",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1671"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "name": "FEDORA-2008-9667",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
        },
        {
          "name": "RHSA-2008:0977",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
        },
        {
          "name": "MDVSA-2008:230",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
        },
        {
          "name": "ADV-2009-0977",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0977"
        },
        {
          "name": "32695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32695"
        },
        {
          "name": "1021182",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021182"
        },
        {
          "name": "RHSA-2008:0978",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
        },
        {
          "name": "DSA-1669",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1669"
        },
        {
          "name": "32778",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32778"
        },
        {
          "name": "RHSA-2008:0976",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
        },
        {
          "name": "FEDORA-2008-9669",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
        },
        {
          "name": "33433",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33433"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-50.html"
        },
        {
          "name": "256408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "32694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32694"
        },
        {
          "name": "32721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32721"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "name": "32853",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32853"
        },
        {
          "name": "DSA-1696",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1696"
        },
        {
          "name": "oval:org.mitre.oval:def:9157",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9157"
        },
        {
          "name": "32715",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32715"
        },
        {
          "name": "32693",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32693"
        },
        {
          "name": "MDVSA-2008:228",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
        },
        {
          "name": "32845",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32845"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        },
        {
          "name": "33434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33434"
        },
        {
          "name": "32798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32798"
        },
        {
          "name": "32684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32684"
        },
        {
          "name": "USN-667-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-667-1"
        },
        {
          "name": "32714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32714"
        },
        {
          "name": "34501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34501"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5014",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:17.046Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5018 (GCVE-0-2008-5018)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2008/dsa-1671	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/32713	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/0977	vdb-entryx_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/32695	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2008/dsa-1669	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32778	third-party-advisoryx_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=452786	x_refsource_MISC
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32694	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32721	third-party-advisoryx_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/32853	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1696	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32715	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021183	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/32693	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32845	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/33434	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32798	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32684	third-party-advisoryx_refsource_SECUNIA
	http://ubuntu.com/usn/usn-667-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/32714	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34501	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:17.206Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "name": "DSA-1671",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1671"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "name": "FEDORA-2008-9667",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
          },
          {
            "name": "32713",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32713"
          },
          {
            "name": "RHSA-2008:0977",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
          },
          {
            "name": "MDVSA-2008:230",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
          },
          {
            "name": "ADV-2009-0977",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0977"
          },
          {
            "name": "oval:org.mitre.oval:def:9872",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9872"
          },
          {
            "name": "32695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32695"
          },
          {
            "name": "RHSA-2008:0978",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
          },
          {
            "name": "DSA-1669",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1669"
          },
          {
            "name": "32778",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32778"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=452786"
          },
          {
            "name": "RHSA-2008:0976",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
          },
          {
            "name": "FEDORA-2008-9669",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-52.html"
          },
          {
            "name": "256408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "32694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32694"
          },
          {
            "name": "32721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32721"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "name": "32853",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32853"
          },
          {
            "name": "DSA-1696",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1696"
          },
          {
            "name": "32715",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32715"
          },
          {
            "name": "1021183",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021183"
          },
          {
            "name": "32693",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32693"
          },
          {
            "name": "MDVSA-2008:228",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
          },
          {
            "name": "32845",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32845"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          },
          {
            "name": "33434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33434"
          },
          {
            "name": "32798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32798"
          },
          {
            "name": "32684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32684"
          },
          {
            "name": "USN-667-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-667-1"
          },
          {
            "name": "32714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32714"
          },
          {
            "name": "34501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34501"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to \"insufficient class checking\" in the Date class."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "name": "DSA-1671",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1671"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "name": "FEDORA-2008-9667",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
        },
        {
          "name": "32713",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32713"
        },
        {
          "name": "RHSA-2008:0977",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
        },
        {
          "name": "MDVSA-2008:230",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
        },
        {
          "name": "ADV-2009-0977",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0977"
        },
        {
          "name": "oval:org.mitre.oval:def:9872",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9872"
        },
        {
          "name": "32695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32695"
        },
        {
          "name": "RHSA-2008:0978",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
        },
        {
          "name": "DSA-1669",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1669"
        },
        {
          "name": "32778",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32778"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=452786"
        },
        {
          "name": "RHSA-2008:0976",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
        },
        {
          "name": "FEDORA-2008-9669",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-52.html"
        },
        {
          "name": "256408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "32694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32694"
        },
        {
          "name": "32721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32721"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "name": "32853",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32853"
        },
        {
          "name": "DSA-1696",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1696"
        },
        {
          "name": "32715",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32715"
        },
        {
          "name": "1021183",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021183"
        },
        {
          "name": "32693",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32693"
        },
        {
          "name": "MDVSA-2008:228",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
        },
        {
          "name": "32845",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32845"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        },
        {
          "name": "33434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33434"
        },
        {
          "name": "32798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32798"
        },
        {
          "name": "32684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32684"
        },
        {
          "name": "USN-667-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-667-1"
        },
        {
          "name": "32714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32714"
        },
        {
          "name": "34501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34501"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5018",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:17.206Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5012 (GCVE-0-2008-5012)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2009/dsa-1697	vendor-advisoryx_refsource_DEBIAN
	http://www.securitytracker.com/id?1021187	vdb-entryx_refsource_SECTRACK
	http://www.debian.org/security/2008/dsa-1671	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/0977	vdb-entryx_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=451619	x_refsource_MISC
	http://www.debian.org/security/2008/dsa-1669	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32778	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/498468	mailing-listx_refsource_BUGTRAQ
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.securityfocus.com/bid/32351	vdb-entryx_refsource_BID
	http://secunia.com/advisories/33433	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://scary.beasts.org/security/CESA-2008-009.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32694	third-party-advisoryx_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/32853	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1696	vendor-advisoryx_refsource_DEBIAN
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://secunia.com/advisories/32715	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32693	third-party-advisoryx_refsource_SECUNIA
	http://scarybeastsecurity.blogspot.com/2008/11/fi…	x_refsource_MISC
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32845	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/33434	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32798	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32684	third-party-advisoryx_refsource_SECUNIA
	http://ubuntu.com/usn/usn-667-1	vendor-advisoryx_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=355126	x_refsource_MISC
	http://secunia.com/advisories/32714	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34501	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:16.886Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "name": "DSA-1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1697"
          },
          {
            "name": "1021187",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021187"
          },
          {
            "name": "DSA-1671",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1671"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "name": "FEDORA-2008-9667",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
          },
          {
            "name": "RHSA-2008:0977",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
          },
          {
            "name": "ADV-2009-0977",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0977"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=451619"
          },
          {
            "name": "DSA-1669",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1669"
          },
          {
            "name": "32778",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32778"
          },
          {
            "name": "20081118 Firefox cross-domain image theft (CESA-2008-009)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/498468"
          },
          {
            "name": "RHSA-2008:0976",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
          },
          {
            "name": "32351",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32351"
          },
          {
            "name": "33433",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33433"
          },
          {
            "name": "256408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://scary.beasts.org/security/CESA-2008-009.html"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "32694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32694"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "name": "32853",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32853"
          },
          {
            "name": "DSA-1696",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1696"
          },
          {
            "name": "oval:org.mitre.oval:def:10750",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10750"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-48.html"
          },
          {
            "name": "32715",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32715"
          },
          {
            "name": "32693",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32693"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://scarybeastsecurity.blogspot.com/2008/11/firefox-cross-domain-image-theft-and.html"
          },
          {
            "name": "MDVSA-2008:228",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
          },
          {
            "name": "32845",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32845"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          },
          {
            "name": "33434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33434"
          },
          {
            "name": "32798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32798"
          },
          {
            "name": "32684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32684"
          },
          {
            "name": "USN-667-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-667-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=355126"
          },
          {
            "name": "32714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32714"
          },
          {
            "name": "34501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34501"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker.  NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "name": "DSA-1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1697"
        },
        {
          "name": "1021187",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021187"
        },
        {
          "name": "DSA-1671",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1671"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "name": "FEDORA-2008-9667",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
        },
        {
          "name": "RHSA-2008:0977",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
        },
        {
          "name": "ADV-2009-0977",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0977"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=451619"
        },
        {
          "name": "DSA-1669",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1669"
        },
        {
          "name": "32778",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32778"
        },
        {
          "name": "20081118 Firefox cross-domain image theft (CESA-2008-009)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/498468"
        },
        {
          "name": "RHSA-2008:0976",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
        },
        {
          "name": "32351",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32351"
        },
        {
          "name": "33433",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33433"
        },
        {
          "name": "256408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://scary.beasts.org/security/CESA-2008-009.html"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "32694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32694"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "name": "32853",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32853"
        },
        {
          "name": "DSA-1696",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1696"
        },
        {
          "name": "oval:org.mitre.oval:def:10750",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10750"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-48.html"
        },
        {
          "name": "32715",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32715"
        },
        {
          "name": "32693",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32693"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://scarybeastsecurity.blogspot.com/2008/11/firefox-cross-domain-image-theft-and.html"
        },
        {
          "name": "MDVSA-2008:228",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
        },
        {
          "name": "32845",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32845"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        },
        {
          "name": "33434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33434"
        },
        {
          "name": "32798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32798"
        },
        {
          "name": "32684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32684"
        },
        {
          "name": "USN-667-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-667-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=355126"
        },
        {
          "name": "32714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32714"
        },
        {
          "name": "34501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34501"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5012",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:16.886Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5016 (GCVE-0-2008-5016)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=4…	x_refsource_MISC
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/32713	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/0977	vdb-entryx_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/32695	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/32778	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32694	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32721	third-party-advisoryx_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	http://www.securitytracker.com/id?1021183	vdb-entryx_refsource_SECTRACK
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32798	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32684	third-party-advisoryx_refsource_SECUNIA
	http://ubuntu.com/usn/usn-667-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/34501	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:17.036Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=439206%2C453406%2C458637%2C444864%2C452157%2C449111%2C444260%2C457375%2C433429%2C443528%2C430394"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "name": "FEDORA-2008-9667",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
          },
          {
            "name": "32713",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32713"
          },
          {
            "name": "RHSA-2008:0977",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
          },
          {
            "name": "MDVSA-2008:230",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
          },
          {
            "name": "ADV-2009-0977",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0977"
          },
          {
            "name": "oval:org.mitre.oval:def:11356",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11356"
          },
          {
            "name": "32695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32695"
          },
          {
            "name": "RHSA-2008:0978",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
          },
          {
            "name": "32778",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32778"
          },
          {
            "name": "RHSA-2008:0976",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
          },
          {
            "name": "FEDORA-2008-9669",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-52.html"
          },
          {
            "name": "256408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "32694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32694"
          },
          {
            "name": "32721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32721"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "name": "1021183",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021183"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          },
          {
            "name": "32798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32798"
          },
          {
            "name": "32684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32684"
          },
          {
            "name": "USN-667-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-667-1"
          },
          {
            "name": "34501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34501"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=439206%2C453406%2C458637%2C444864%2C452157%2C449111%2C444260%2C457375%2C433429%2C443528%2C430394"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "name": "FEDORA-2008-9667",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
        },
        {
          "name": "32713",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32713"
        },
        {
          "name": "RHSA-2008:0977",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
        },
        {
          "name": "MDVSA-2008:230",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
        },
        {
          "name": "ADV-2009-0977",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0977"
        },
        {
          "name": "oval:org.mitre.oval:def:11356",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11356"
        },
        {
          "name": "32695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32695"
        },
        {
          "name": "RHSA-2008:0978",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
        },
        {
          "name": "32778",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32778"
        },
        {
          "name": "RHSA-2008:0976",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
        },
        {
          "name": "FEDORA-2008-9669",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-52.html"
        },
        {
          "name": "256408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "32694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32694"
        },
        {
          "name": "32721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32721"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "name": "1021183",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021183"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        },
        {
          "name": "32798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32798"
        },
        {
          "name": "32684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32684"
        },
        {
          "name": "USN-667-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-667-1"
        },
        {
          "name": "34501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34501"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5016",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:17.036Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5052 (GCVE-0-2008-5052)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=454113	x_refsource_MISC
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	http://www.securitytracker.com/id?1021183	vdb-entryx_refsource_SECTRACK
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:16.891Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "name": "oval:org.mitre.oval:def:9449",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-52.html"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "name": "1021183",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021183"
          },
          {
            "name": "MDVSA-2008:228",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "name": "oval:org.mitre.oval:def:9449",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-52.html"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "name": "1021183",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021183"
        },
        {
          "name": "MDVSA-2008:228",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5052",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-12T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:16.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5022 (GCVE-0-2008-5022)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1697	vendor-advisoryx_refsource_DEBIAN
	http://www.debian.org/security/2008/dsa-1671	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/32713	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/0977	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/32695	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2008/dsa-1669	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32778	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/33433	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32694	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021188	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/32721	third-party-advisoryx_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=460002	x_refsource_MISC
	http://secunia.com/advisories/32853	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1696	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32715	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32693	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32845	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/33434	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32798	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32684	third-party-advisoryx_refsource_SECUNIA
	http://ubuntu.com/usn/usn-667-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/32714	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34501	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:16.918Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-56.html"
          },
          {
            "name": "DSA-1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1697"
          },
          {
            "name": "DSA-1671",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1671"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "name": "FEDORA-2008-9667",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
          },
          {
            "name": "32713",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32713"
          },
          {
            "name": "RHSA-2008:0977",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
          },
          {
            "name": "MDVSA-2008:230",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
          },
          {
            "name": "ADV-2009-0977",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0977"
          },
          {
            "name": "32695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32695"
          },
          {
            "name": "RHSA-2008:0978",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
          },
          {
            "name": "DSA-1669",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1669"
          },
          {
            "name": "32778",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32778"
          },
          {
            "name": "RHSA-2008:0976",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
          },
          {
            "name": "FEDORA-2008-9669",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
          },
          {
            "name": "33433",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33433"
          },
          {
            "name": "oval:org.mitre.oval:def:11186",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11186"
          },
          {
            "name": "256408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "32694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32694"
          },
          {
            "name": "1021188",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021188"
          },
          {
            "name": "32721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32721"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=460002"
          },
          {
            "name": "32853",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32853"
          },
          {
            "name": "DSA-1696",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1696"
          },
          {
            "name": "32715",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32715"
          },
          {
            "name": "32693",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32693"
          },
          {
            "name": "MDVSA-2008:228",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
          },
          {
            "name": "32845",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32845"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          },
          {
            "name": "33434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33434"
          },
          {
            "name": "32798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32798"
          },
          {
            "name": "32684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32684"
          },
          {
            "name": "USN-667-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-667-1"
          },
          {
            "name": "32714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32714"
          },
          {
            "name": "34501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34501"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-56.html"
        },
        {
          "name": "DSA-1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1697"
        },
        {
          "name": "DSA-1671",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1671"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "name": "FEDORA-2008-9667",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
        },
        {
          "name": "32713",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32713"
        },
        {
          "name": "RHSA-2008:0977",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
        },
        {
          "name": "MDVSA-2008:230",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
        },
        {
          "name": "ADV-2009-0977",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0977"
        },
        {
          "name": "32695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32695"
        },
        {
          "name": "RHSA-2008:0978",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
        },
        {
          "name": "DSA-1669",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1669"
        },
        {
          "name": "32778",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32778"
        },
        {
          "name": "RHSA-2008:0976",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
        },
        {
          "name": "FEDORA-2008-9669",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
        },
        {
          "name": "33433",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33433"
        },
        {
          "name": "oval:org.mitre.oval:def:11186",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11186"
        },
        {
          "name": "256408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "32694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32694"
        },
        {
          "name": "1021188",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021188"
        },
        {
          "name": "32721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32721"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=460002"
        },
        {
          "name": "32853",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32853"
        },
        {
          "name": "DSA-1696",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1696"
        },
        {
          "name": "32715",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32715"
        },
        {
          "name": "32693",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32693"
        },
        {
          "name": "MDVSA-2008:228",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
        },
        {
          "name": "32845",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32845"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        },
        {
          "name": "33434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33434"
        },
        {
          "name": "32798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32798"
        },
        {
          "name": "32684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32684"
        },
        {
          "name": "USN-667-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-667-1"
        },
        {
          "name": "32714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32714"
        },
        {
          "name": "34501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34501"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5022",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:16.918Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5021 (GCVE-0-2008-5021)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2009/dsa-1697	vendor-advisoryx_refsource_DEBIAN
	http://www.debian.org/security/2008/dsa-1671	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/32713	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/0977	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/32695	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2008/dsa-1669	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32778	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/33433	third-party-advisoryx_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32694	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32721	third-party-advisoryx_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=460002	x_refsource_MISC
	http://secunia.com/advisories/32853	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1696	vendor-advisoryx_refsource_DEBIAN
	http://www.securitytracker.com/id?1021186	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/32715	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32693	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32845	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/33434	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32798	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32684	third-party-advisoryx_refsource_SECUNIA
	http://ubuntu.com/usn/usn-667-1	vendor-advisoryx_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/32714	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34501	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:17.235Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "name": "DSA-1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1697"
          },
          {
            "name": "DSA-1671",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1671"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "name": "FEDORA-2008-9667",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
          },
          {
            "name": "32713",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32713"
          },
          {
            "name": "RHSA-2008:0977",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
          },
          {
            "name": "MDVSA-2008:230",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
          },
          {
            "name": "ADV-2009-0977",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0977"
          },
          {
            "name": "32695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32695"
          },
          {
            "name": "RHSA-2008:0978",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
          },
          {
            "name": "DSA-1669",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1669"
          },
          {
            "name": "32778",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32778"
          },
          {
            "name": "RHSA-2008:0976",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
          },
          {
            "name": "FEDORA-2008-9669",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
          },
          {
            "name": "33433",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33433"
          },
          {
            "name": "256408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-55.html"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "32694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32694"
          },
          {
            "name": "32721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32721"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=460002"
          },
          {
            "name": "32853",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32853"
          },
          {
            "name": "DSA-1696",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1696"
          },
          {
            "name": "1021186",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021186"
          },
          {
            "name": "32715",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32715"
          },
          {
            "name": "32693",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32693"
          },
          {
            "name": "MDVSA-2008:228",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
          },
          {
            "name": "32845",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32845"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          },
          {
            "name": "33434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33434"
          },
          {
            "name": "32798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32798"
          },
          {
            "name": "32684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32684"
          },
          {
            "name": "USN-667-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-667-1"
          },
          {
            "name": "oval:org.mitre.oval:def:9642",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9642"
          },
          {
            "name": "32714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32714"
          },
          {
            "name": "34501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34501"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "name": "DSA-1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1697"
        },
        {
          "name": "DSA-1671",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1671"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "name": "FEDORA-2008-9667",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
        },
        {
          "name": "32713",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32713"
        },
        {
          "name": "RHSA-2008:0977",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
        },
        {
          "name": "MDVSA-2008:230",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
        },
        {
          "name": "ADV-2009-0977",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0977"
        },
        {
          "name": "32695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32695"
        },
        {
          "name": "RHSA-2008:0978",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
        },
        {
          "name": "DSA-1669",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1669"
        },
        {
          "name": "32778",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32778"
        },
        {
          "name": "RHSA-2008:0976",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
        },
        {
          "name": "FEDORA-2008-9669",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
        },
        {
          "name": "33433",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33433"
        },
        {
          "name": "256408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-55.html"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "32694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32694"
        },
        {
          "name": "32721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32721"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=460002"
        },
        {
          "name": "32853",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32853"
        },
        {
          "name": "DSA-1696",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1696"
        },
        {
          "name": "1021186",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021186"
        },
        {
          "name": "32715",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32715"
        },
        {
          "name": "32693",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32693"
        },
        {
          "name": "MDVSA-2008:228",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
        },
        {
          "name": "32845",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32845"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        },
        {
          "name": "33434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33434"
        },
        {
          "name": "32798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32798"
        },
        {
          "name": "32684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32684"
        },
        {
          "name": "USN-667-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-667-1"
        },
        {
          "name": "oval:org.mitre.oval:def:9642",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9642"
        },
        {
          "name": "32714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32714"
        },
        {
          "name": "34501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34501"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5021",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:17.235Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-5017 (GCVE-0-2008-5017)

Vulnerability from cvelistv5 – Published: 2008-11-13 11:00 – Updated: 2024-08-07 10:40

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.vupen.com/english/advisories/2008/3146	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2009/dsa-1697	vendor-advisoryx_refsource_DEBIAN
	http://www.debian.org/security/2008/dsa-1671	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/32281	vdb-entryx_refsource_BID
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/32713	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/0977	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/32695	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2008/dsa-1669	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32778	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/33433	third-party-advisoryx_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2008/mfs…	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32694	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32721	third-party-advisoryx_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-319A.html	third-party-advisoryx_refsource_CERT
	http://secunia.com/advisories/32853	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1696	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32715	third-party-advisoryx_refsource_SECUNIA
	http://www.securitytracker.com/id?1021183	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/32693	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32845	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/33434	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32798	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32684	third-party-advisoryx_refsource_SECUNIA
	http://ubuntu.com/usn/usn-667-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/32714	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/34501	third-party-advisoryx_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=455987	x_refsource_MISC

Date Public ?

2008-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:16.993Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2008-3146",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3146"
          },
          {
            "name": "DSA-1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1697"
          },
          {
            "name": "DSA-1671",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1671"
          },
          {
            "name": "32281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32281"
          },
          {
            "name": "oval:org.mitre.oval:def:11436",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11436"
          },
          {
            "name": "FEDORA-2008-9667",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
          },
          {
            "name": "32713",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32713"
          },
          {
            "name": "RHSA-2008:0977",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
          },
          {
            "name": "MDVSA-2008:230",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
          },
          {
            "name": "ADV-2009-0977",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0977"
          },
          {
            "name": "32695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32695"
          },
          {
            "name": "RHSA-2008:0978",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
          },
          {
            "name": "DSA-1669",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1669"
          },
          {
            "name": "32778",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32778"
          },
          {
            "name": "RHSA-2008:0976",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
          },
          {
            "name": "FEDORA-2008-9669",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
          },
          {
            "name": "33433",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33433"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-52.html"
          },
          {
            "name": "256408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
          },
          {
            "name": "SUSE-SA:2008:055",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
          },
          {
            "name": "32694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32694"
          },
          {
            "name": "32721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32721"
          },
          {
            "name": "TA08-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
          },
          {
            "name": "32853",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32853"
          },
          {
            "name": "DSA-1696",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1696"
          },
          {
            "name": "32715",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32715"
          },
          {
            "name": "1021183",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021183"
          },
          {
            "name": "32693",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32693"
          },
          {
            "name": "MDVSA-2008:228",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
          },
          {
            "name": "32845",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32845"
          },
          {
            "name": "MDVSA-2008:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
          },
          {
            "name": "33434",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33434"
          },
          {
            "name": "32798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32798"
          },
          {
            "name": "32684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32684"
          },
          {
            "name": "USN-667-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-667-1"
          },
          {
            "name": "32714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32714"
          },
          {
            "name": "34501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34501"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=455987"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2008-3146",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3146"
        },
        {
          "name": "DSA-1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1697"
        },
        {
          "name": "DSA-1671",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1671"
        },
        {
          "name": "32281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32281"
        },
        {
          "name": "oval:org.mitre.oval:def:11436",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11436"
        },
        {
          "name": "FEDORA-2008-9667",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html"
        },
        {
          "name": "32713",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32713"
        },
        {
          "name": "RHSA-2008:0977",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0977.html"
        },
        {
          "name": "MDVSA-2008:230",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:230"
        },
        {
          "name": "ADV-2009-0977",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0977"
        },
        {
          "name": "32695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32695"
        },
        {
          "name": "RHSA-2008:0978",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0978.html"
        },
        {
          "name": "DSA-1669",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1669"
        },
        {
          "name": "32778",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32778"
        },
        {
          "name": "RHSA-2008:0976",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0976.html"
        },
        {
          "name": "FEDORA-2008-9669",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html"
        },
        {
          "name": "33433",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33433"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2008/mfsa2008-52.html"
        },
        {
          "name": "256408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1"
        },
        {
          "name": "SUSE-SA:2008:055",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html"
        },
        {
          "name": "32694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32694"
        },
        {
          "name": "32721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32721"
        },
        {
          "name": "TA08-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-319A.html"
        },
        {
          "name": "32853",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32853"
        },
        {
          "name": "DSA-1696",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1696"
        },
        {
          "name": "32715",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32715"
        },
        {
          "name": "1021183",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021183"
        },
        {
          "name": "32693",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32693"
        },
        {
          "name": "MDVSA-2008:228",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:228"
        },
        {
          "name": "32845",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32845"
        },
        {
          "name": "MDVSA-2008:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:235"
        },
        {
          "name": "33434",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33434"
        },
        {
          "name": "32798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32798"
        },
        {
          "name": "32684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32684"
        },
        {
          "name": "USN-667-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-667-1"
        },
        {
          "name": "32714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32714"
        },
        {
          "name": "34501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34501"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=455987"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-5017",
    "datePublished": "2008-11-13T11:00:00.000Z",
    "dateReserved": "2008-11-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:40:16.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2008_0976

CVE-2008-5024 (GCVE-0-2008-5024)

CVE-2008-5014 (GCVE-0-2008-5014)

CVE-2008-5018 (GCVE-0-2008-5018)

CVE-2008-5012 (GCVE-0-2008-5012)

CVE-2008-5016 (GCVE-0-2008-5016)

CVE-2008-5052 (GCVE-0-2008-5052)

CVE-2008-5022 (GCVE-0-2008-5022)

CVE-2008-5021 (GCVE-0-2008-5021)

CVE-2008-5017 (GCVE-0-2008-5017)

Tags

Sightings

Nomenclature