Vulnerability Name:

CVE-2008-5715 (CCN-47572)

Assigned:2008-12-23
Published:2008-12-23
Updated:2018-10-11
Summary:Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property (aka location.hash).
Note: it was later reported that earlier versions are also affected, and that the impact is CPU consumption and application hang in unspecified circumstances perhaps involving other platforms.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
4.2 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-20
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2008-5715

Source: OSVDB
Type: UNKNOWN
51032

Source: SREASON
Type: UNKNOWN
4807

Source: MISC
Type: UNKNOWN
http://websecurity.com.ua/3424/

Source: CCN
Type: Mozilla Web site
Firefox web browser

Source: CCN
Type: OSVDB ID: 51032
Mozilla Firefox location.hash Javascript Handling Remote DoS

Source: CCN
Type: OSVDB ID: 57506
Microsoft IE location.hash Javascript Handling Remote DoS

Source: CCN
Type: OSVDB ID: 57507
Google Chrome location.hash Javascript Handling Remote DoS

Source: BUGTRAQ
Type: UNKNOWN
20090821 DoS vulnerabilities in Mozilla Firefox, Internet Explorer and Chrome

Source: BID
Type: UNKNOWN
32988

Source: CCN
Type: BID-32988
Mozilla Firefox 'location.hash' Remote Denial of Service Vulnerability

Source: XF
Type: UNKNOWN
firefox-locationhash-dos(47572)

Source: XF
Type: UNKNOWN
firefox-locationhash-dos(47572)

Source: EXPLOIT-DB
Type: UNKNOWN
7554

Vulnerable Configuration:Configuration 1:
  • cpe:/a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*
  • AND
  • cpe:/o:microsoft:windows_vista:*:gold:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    mozilla firefox 3.0.5
    microsoft windows vista * gold
    mozilla firefox 3.0.5