NVD

Id
17  
Name
CVE-2008-0017  
Description
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-13  
Modified Date
2012-10-30  
Seq
2008-0017  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259 17 CVE-2008-0017 SUSE-SA:2008:055  View
260 17 CVE-2008-0017 oval:org.mitre.oval:def:11005  View
261 17 CVE-2008-0017 256408  View
262 17 CVE-2008-0017 USN-667-1  View
263 17 CVE-2008-0017 DSA-1669  View
264 17 CVE-2008-0017 DSA-1671  View
265 17 CVE-2008-0017 DSA-1697  View
266 17 CVE-2008-0017 20081113 Mozilla Unchecked Allocation Remote Code Execution  View
267 17 CVE-2008-0017 MDVSA-2008:228  View
268 17 CVE-2008-0017 MDVSA-2008:230  View
269 17 CVE-2008-0017 http://www.mozilla.org/security/announce/2008/mfsa2008-54.html  View
270 17 CVE-2008-0017 RHSA-2008:0977  View
271 17 CVE-2008-0017 RHSA-2008:0978  View
272 17 CVE-2008-0017 32281  View
273 17 CVE-2008-0017 1021185  View
274 17 CVE-2008-0017 TA08-319A  View
275 17 CVE-2008-0017 ADV-2008-3146  View
276 17 CVE-2008-0017 ADV-2009-0977  View
277 17 CVE-2008-0017 https://bugzilla.mozilla.org/show_bug.cgi?id=443299  View
278 17 CVE-2008-0017 FEDORA-2008-9667  View
279 17 CVE-2008-0017 FEDORA-2008-9669  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46637 JVNDB-2008-001947 Mozilla Firefox/SeaMonkey の http-index-format MIME type parser におけるメモリ割り当てに関するバッファオーバーフローの脆弱性 Mozilla Firefox/SeaMonkey の http-index-format MIME type parser (nsDirIndexParser) には、メモリ割り当ての失敗に対して正しくチェックが行われないため、バッファオーバーフローの脆弱性が存在します。 CVE-2008-0017 30130 CVE-2008-0017 17 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001947.html 2008-11-12 2009-05-01 View