NVD

Id
4801  
Name
CVE-2008-5014  
Description
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-13  
Modified Date
2012-10-30  
Seq
2008-5014  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30055 4801 CVE-2008-5014 SUSE-SA:2008:055  View
30056 4801 CVE-2008-5014 oval:org.mitre.oval:def:9157  View
30057 4801 CVE-2008-5014 256408  View
30058 4801 CVE-2008-5014 USN-667-1  View
30059 4801 CVE-2008-5014 DSA-1669  View
30060 4801 CVE-2008-5014 DSA-1671  View
30061 4801 CVE-2008-5014 DSA-1696  View
30062 4801 CVE-2008-5014 DSA-1697  View
30063 4801 CVE-2008-5014 MDVSA-2008:228  View
30064 4801 CVE-2008-5014 MDVSA-2008:230  View
30065 4801 CVE-2008-5014 MDVSA-2008:235  View
30066 4801 CVE-2008-5014 http://www.mozilla.org/security/announce/2008/mfsa2008-50.html  View
30067 4801 CVE-2008-5014 RHSA-2008:0976  View
30068 4801 CVE-2008-5014 RHSA-2008:0977  View
30069 4801 CVE-2008-5014 RHSA-2008:0978  View
30070 4801 CVE-2008-5014 32281  View
30071 4801 CVE-2008-5014 1021182  View
30072 4801 CVE-2008-5014 TA08-319A  View
30073 4801 CVE-2008-5014 ADV-2008-3146  View
30074 4801 CVE-2008-5014 ADV-2009-0977  View
30075 4801 CVE-2008-5014 https://bugzilla.mozilla.org/show_bug.cgi?id=436741  View
30076 4801 CVE-2008-5014 FEDORA-2008-9667  View
30077 4801 CVE-2008-5014 FEDORA-2008-9669  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46638 JVNDB-2008-001948 複数の Mozilla 製品における window.__proto__.__proto__ オブジェクトの改ざんに関する任意のコードを実行される脆弱性 複数の Mozilla 製品の jslock.cpp には、window.__proto__.__proto__ オブジェクトを改ざんされることにより任意のコードを実行される脆弱性が存在します。 CVE-2008-5014 35127 CVE-2008-5014 4801 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001948.html 2008-11-12 2009-04-30 View