Oval Definition:oval:org.mitre.oval:def:10206
Revision Date:2013-04-29Version:12
Title:Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.
Description:Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2008-4062
Platform(s):CentOS Linux 3
CentOS Linux 4
CentOS Linux 5
Oracle Linux 4
Oracle Linux 5
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Red Hat Enterprise Linux 5
Product(s):
Definition Synopsis
  • OS Section: RHEL3, CentOS3
  • RHEL3 or CentOS3
  • The operating system installed on the system is Red Hat Enterprise Linux 3
  • OR CentOS Linux 3.x
  • AND Configuration section
  • seamonkey-nspr is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-mail is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-chat is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-devel is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3
  • OR seamonkey-nss is earlier than 0:1.0.9-0.24.el3
  • OR OS Section: RHEL4, CentOS4, Oracle Linux 4
  • RHEL4, CentOS4 or Oracle Linux 4
  • The operating system installed on the system is Red Hat Enterprise Linux 4
  • OR CentOS Linux 4.x
  • OR Oracle Linux 4.x
  • AND Configuration section
  • devhelp-devel is earlier than 0:0.10-0.10.el4
  • OR seamonkey-js-debugger is earlier than 0:1.0.9-26.el4
  • OR thunderbird is earlier than 0:1.5.0.12-16.el4
  • OR seamonkey is earlier than 0:1.0.9-26.el4
  • OR devhelp is earlier than 0:0.10-0.10.el4
  • OR firefox is earlier than 0:3.0.2-3.el4
  • OR seamonkey-mail is earlier than 0:1.0.9-26.el4
  • OR seamonkey-chat is earlier than 0:1.0.9-26.el4
  • OR seamonkey-devel is earlier than 0:1.0.9-26.el4
  • OR seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4
  • OR OS Section: RHEL5, CentOS5, Oracle Linux 5
  • RHEL5, CentOS5 or Oracle Linux 5
  • The operating system installed on the system is Red Hat Enterprise Linux 5
  • OR The operating system installed on the system is CentOS Linux 5.x
  • OR Oracle Linux 5.x
  • AND Configuration section
  • devhelp-devel is earlier than 0:0.12-19.el5
  • OR nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5
  • OR xulrunner-devel is earlier than 0:1.9.0.2-5.el5
  • OR nss is earlier than 0:3.12.1.1-1.el5
  • OR thunderbird is earlier than 0:2.0.0.17-1.el5
  • OR xulrunner is earlier than 0:1.9.0.2-5.el5
  • OR yelp is earlier than 0:2.16.0-21.el5
  • OR devhelp is earlier than 0:0.12-19.el5
  • OR xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5
  • OR firefox is earlier than 0:3.0.2-3.el5
  • OR nss-devel is earlier than 0:3.12.1.1-1.el5
  • OR nss-tools is earlier than 0:3.12.1.1-1.el5
  • BACK