NVD

Id
398  
Name
CVE-2008-0420  
Description
modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-02-11  
Modified Date
2011-04-12  
Seq
2008-0420  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
2796 398 CVE-2008-0420 http://browser.netscape.com/releasenotes/  View
2797 398 CVE-2008-0420 oval:org.mitre.oval:def:10119  View
2798 398 CVE-2008-0420 1019434  View
2799 398 CVE-2008-0420 238492  View
2800 398 CVE-2008-0420 GLSA-200805-18  View
2801 398 CVE-2008-0420 MDVSA-2008:048  View
2802 398 CVE-2008-0420 http://www.mozilla.org/security/announce/2008/mfsa2008-07.html  View
2803 398 CVE-2008-0420 20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service  View
2804 398 CVE-2008-0420 27826  View
2805 398 CVE-2008-0420 USN-582-1  View
2806 398 CVE-2008-0420 USN-582-2  View
2807 398 CVE-2008-0420 USN-576-1  View
2808 398 CVE-2008-0420 ADV-2008-0627  View
2809 398 CVE-2008-0420 ADV-2008-1793  View
2810 398 CVE-2008-0420 firefox-bmp-information-disclosure(40491)  View
2811 398 CVE-2008-0420 firefox-bmp-dos(40606)  View
2812 398 CVE-2008-0420 https://bugzilla.mozilla.org/show_bug.cgi?id=408076  View
2813 398 CVE-2008-0420 FEDORA-2008-2060  View
2814 398 CVE-2008-0420 FEDORA-2008-2118  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45824 JVNDB-2008-001134 Mozilla Firefox/SeaMonkey における初期化されていないメモリの一部を読まれる脆弱性 Mozilla Firefox/SeaMonkey には modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp において、canvas 要素などの取り扱いに不備があり、mColors テーブルに関連する計算を適切に行わないため、不正なビットマップファイルによって、初期化されていないメモリの一部を読まれる脆弱性が存在します。 CVE-2008-0420 30533 CVE-2008-0420 398 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001134.html 2008-02-07 2008-06-23 View