CVE-2008-0420
modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird...
9.3 High
modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
Exploit likelihood
2.22%Down 1.7 points since Feb 4, 2022
What each source reports
NVD Score used
modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
- Record
CVE-2008-0420- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
- Record
CVE-2008-0420- Updated
- 2026-11-02
EUVDEUVD-2008-0430 No score
modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
- Record
EUVD-2008-0430- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6cgj-54pv-ggm2 No score
modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird...
modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
- Record
GHSA-6cgj-54pv-ggm2- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 From an advisory covering 13 CVEs |
before 1.8.0.15~pre080131b-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 8 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch1 |
1.8.0.15~pre080131b-0etch1 |
iceapeDebian:4.0 From an advisory covering 11 CVEs |
before 1.0.13~pre080323b-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1 Show 5 moreShow less1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.8-41.0.9-0etch1 |
1.0.13~pre080323b-0etch1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:1.5.0.12-0.10.el4 | 0:1.5.0.12-0.10.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:1.5.0.12-0.10.el4 | 0:1.5.0.12-0.10.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:1.5.0.12-0.10.el4 | 0:1.5.0.12-0.10.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:1.5.0.12-0.10.el4 | 0:1.5.0.12-0.10.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:1.5.0.12-0.10.el4 | 0:1.5.0.12-0.10.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:1.5.0.12-0.10.el4 | 0:1.5.0.12-0.10.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:1.5.0.12-0.10.el4 | 0:1.5.0.12-0.10.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:1.5.0.12-0.10.el4 | 0:1.5.0.12-0.10.el4 |
Show 128 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:1.5.0.12-9.el5 | 0:1.5.0.12-9.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:1.5.0.12-9.el5 | 0:1.5.0.12-9.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.5.0.12-9.el5 | 0:1.5.0.12-9.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.5.0.12-9.el5 | 0:1.5.0.12-9.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el2 | 0:1.0.9-0.9.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 12 CVEs |
before 0:1.0.9-0.9.el3 | 0:1.0.9-0.9.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.0.9-9.el4 | 0:1.0.9-9.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el4 | 0:1.5.0.12-8.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el4 | 0:1.5.0.12-8.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el4 | 0:1.5.0.12-8.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el4 | 0:1.5.0.12-8.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el4 | 0:1.5.0.12-8.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el4 | 0:1.5.0.12-8.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el4 | 0:1.5.0.12-8.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el4 | 0:1.5.0.12-8.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el5 | 0:1.5.0.12-8.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el5 | 0:1.5.0.12-8.el5 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el5 | 0:1.5.0.12-8.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 10 CVEs |
before 0:1.5.0.12-8.el5 | 0:1.5.0.12-8.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0420 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published February 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.22%, the 82nd percentile. No source names a fixed version.
References
ubuntu.com/usn/usn-582-2
browser.netscape.com/releasenotes
securityfocus.com/archive/1/488264/100/0/threaded
redhat.com/archives/fedora-package-announce/2008-February/msg00946.html
secunia.com/advisories/30620
Show 77 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/40491
sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
bugzilla.mozilla.org/show_bug.cgi?id=408076
mozilla.org/security/announce/2008/mfsa2008-07.html
vupen.com/english/advisories/2008/1793/references
securitytracker.com/id?1019434
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119
gentoo.org/security/en/glsa/glsa-200805-18.xml
mandriva.com/security/advisories?name=MDVSA-2008:048
usn.ubuntu.com/576-1
nvd.nist.gov/vuln/detail/CVE-2008-0420
github.com/advisories/GHSA-6cgj-54pv-ggm2
access.redhat.com/errata/RHSA-2008:0103
bugzilla.redhat.com/show_bug.cgi?id=431732
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0103.json
cve.org/CVERecord?id=CVE-2008-0412