NVD

Id
2679  
Name
CVE-2008-2785  
Description
Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-19  
Modified Date
2011-05-13  
Seq
2008-2785  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
16812 2679 CVE-2008-2785 http://blog.mozilla.com/security/2008/06/18/new-security-issue-under-investigation/  View
16813 2679 CVE-2008-2785 http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30  View
16814 2679 CVE-2008-2785 oval:org.mitre.oval:def:9900  View
16815 2679 CVE-2008-2785 RHSA-2008:0616  View
16816 2679 CVE-2008-2785 GLSA-200808-03  View
16817 2679 CVE-2008-2785 SSA:2008-210-05  View
16818 2679 CVE-2008-2785 256408  View
16819 2679 CVE-2008-2785 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238  View
16820 2679 CVE-2008-2785 DSA-1614  View
16821 2679 CVE-2008-2785 DSA-1615  View
16822 2679 CVE-2008-2785 DSA-1621  View
16823 2679 CVE-2008-2785 DSA-1697  View
16824 2679 CVE-2008-2785 MDVSA-2008:148  View
16825 2679 CVE-2008-2785 MDVSA-2008:155  View
16826 2679 CVE-2008-2785 http://www.mozilla.org/security/announce/2008/mfsa2008-34.html  View
16827 2679 CVE-2008-2785 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400  View
16828 2679 CVE-2008-2785 RHSA-2008:0597  View
16829 2679 CVE-2008-2785 RHSA-2008:0598  View
16830 2679 CVE-2008-2785 RHSA-2008:0599  View
16831 2679 CVE-2008-2785 20080717 ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption Vulnerability  View
16832 2679 CVE-2008-2785 20080729 rPSA-2008-0238-1 firefox  View
16833 2679 CVE-2008-2785 29802  View
16834 2679 CVE-2008-2785 1020336  View
16835 2679 CVE-2008-2785 SSA:2008-198-02  View
16836 2679 CVE-2008-2785 SSA:2008-198-01  View
16837 2679 CVE-2008-2785 USN-623-1  View
16838 2679 CVE-2008-2785 USN-626-1  View
16839 2679 CVE-2008-2785 USN-626-2  View
16840 2679 CVE-2008-2785 USN-629-1  View
16841 2679 CVE-2008-2785 ADV-2008-1873  View
16842 2679 CVE-2008-2785 ADV-2009-0977  View
16843 2679 CVE-2008-2785 http://www.zerodayinitiative.com/advisories/ZDI-08-044/  View
16844 2679 CVE-2008-2785 firefox-unspecified-code-execution(43167)  View
16845 2679 CVE-2008-2785 https://bugzilla.mozilla.org/show_bug.cgi?id=440230  View
16846 2679 CVE-2008-2785 https://issues.rpath.com/browse/RPL-2683  View
16847 2679 CVE-2008-2785 FEDORA-2008-6737  View
16848 2679 CVE-2008-2785 FEDORA-2008-6706  View
16849 2679 CVE-2008-2785 FEDORA-2008-6517  View
16850 2679 CVE-2008-2785 FEDORA-2008-6519  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46256 JVNDB-2008-001566 複数の Mozilla 製品の CSSValue 配列データ構造に関する任意のコードを実行される脆弱性 複数の Mozilla 製品には、CSSValue 配列データ構造の取り扱いに不備があるため使用中のメモリを解放することによる、任意のコードを実行される脆弱性が存在します。 CVE-2008-2785 32898 CVE-2008-2785 2679 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001566.html 2008-07-15 2009-04-27 View