CVE-2008-5017

CRITICAL 10.0CVE-2008-5017 · Published 13/11/2008 · updated 16/06/2026

In short

CVE-2008-5017 is a CRITICAL (CVSS 10.0) vulnerability affecting firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.1% of all vulnerabilities.
Fix: update to 2.0.0.18, 3.0.4, 1.1.13 or later.

Package	Affected versions	Patched versions
firefox mozilla	`≥ 2.0, < 2.0.0.18≥ 3.0, < 3.0.4`	`2.0.0.183.0.4`
seamonkey mozilla	`≥ 1.0, < 1.1.13`	`1.1.13`
thunderbird mozilla	`≥ 2.0, < 2.0.0.18`	`2.0.0.18`

Description

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors.

References

lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html · Third Party Advisory
secunia.com/advisories/32684 · Third Party Advisory
secunia.com/advisories/32693 · Third Party Advisory
secunia.com/advisories/32694 · Third Party Advisory
secunia.com/advisories/32695 · Third Party Advisory
secunia.com/advisories/32713 · Third Party Advisory
secunia.com/advisories/32714 · Third Party Advisory
secunia.com/advisories/32715 · Third Party Advisory
secunia.com/advisories/32721 · Third Party Advisory
secunia.com/advisories/32778 · Third Party Advisory
secunia.com/advisories/32798 · Third Party Advisory
secunia.com/advisories/32845 · Third Party Advisory
secunia.com/advisories/32853 · Third Party Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

≥ 2.0, < 2.0.0.18≥ 3.0, < 3.0.4

2.0.0.183.0.4

seamonkey

mozilla

≥ 1.0, < 1.1.13

1.1.13

thunderbird

mozilla

≥ 2.0, < 2.0.0.18

2.0.0.18

More vulnerabilities in firefox

See all →