Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Published:		18.07.2008
Source:		MOZILLA
SecurityVulns ID:		9154
Type:		client
Level:		7/10
Description:		Array index overflow on CSS parsing, crash on GIF processing under Mac OS X, code execution on command-line launch with URI.

Affected:		MOZILLA : Firefox 2.0
		MOZILLA : Thunderbird 2.0
		MOZILLA : Seamonkey 1.1
		MOZILLA : Firefox 3.0
CVE:		CVE-2008-2934
		CVE-2008-2933
		CVE-2008-2785 (Unspecified vulnerability in Firefox 3.0 and 2.0.x has unknown impact and remote attack vectors, aka ZDI-CAN-349.)

Original document		ZDI, ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption Vulnerability (18.07.2008)
		MOZILLA, Mozilla Foundation Security Advisory 2008-35 (18.07.2008)
		MOZILLA, Mozilla Foundation Security Advisory 2008-36 (18.07.2008)
		MOZILLA, Mozilla Foundation Security Advisory 2008-34 (18.07.2008)

Discuss:

Read or add your comments to this news (0 comments)