CVE-2008-5014
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x...
10.0 HighFix available
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.proto.proto object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.
Exploit likelihood
5.87%Down 2.4 points since Feb 4, 2022
What each source reports
NVD Score used
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.proto.proto object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.
- Record
CVE-2008-5014- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.proto.proto object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.
- Record
CVE-2008-5014- Updated
- 2026-11-02
EUVDEUVD-2008-4993 No score
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.proto.proto object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.
- Record
EUVD-2008-4993- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8m88-6wvj-46c6 No score
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x...
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.proto.proto object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.
- Record
GHSA-8m88-6wvj-46c6- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score
MozillaThunderbird-91.1.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10601-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 |
before 1.8.0.15~pre080614h-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 12 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch11.8.0.15~pre080131b-0etch11.8.0.15~pre080323b-0etch11.8.0.15~pre080323b-0etch21.8.0.15~pre080614d-0etch1 |
1.8.0.15~pre080614h-0etch1 |
iceweaselDebian:4.0 |
before 2.0.0.18-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.12-0etch1 Show 27 moreShow less2.0.0.12-12.0.0.12-22.0.0.13-0etch12.0.0.13-12.0.0.14-0etch12.0.0.14-12.0.0.14-22.0.0.15-0etch12.0.0.16-0etch12.0.0.17-0etch12.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.18-0etch1 |
icedoveDebian:4.0 |
before 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, plus listed versions 1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny11.5.0.13+1.5.0.14b.dfsg1-0etch11.5.0.13+1.5.0.14b.dfsg1-0lenny1 Show 5 moreShow less1.5.0.13+1.5.0.15a.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch2 |
1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 |
iceapeDebian:4.0 |
before 1.0.13~pre080614i-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1 Show 8 moreShow less1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.13~pre080323b-0etch11.0.13~pre080323b-0etch21.0.13~pre080323b-0etch31.0.8-41.0.9-0etch1 |
1.0.13~pre080614i-0etch1 |
thunderbirdRed Hat:enterprise_linux:4::as |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbirdRed Hat:enterprise_linux:4::es |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
Show 177 moreShow less
| Package | Affected | Fixed |
|---|---|---|
thunderbirdRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.12-17.el4 | 0:1.5.0.12-17.el4 |
thunderbirdRed Hat:enterprise_linux:5::client |
before 0:2.0.0.18-1.el5 | 0:2.0.0.18-1.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.0.0.18-1.el5 | 0:2.0.0.18-1.el5 |
thunderbirdRed Hat:rhel_productivity:5 |
before 0:2.0.0.18-1.el5 | 0:2.0.0.18-1.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 |
before 0:2.0.0.18-1.el5 | 0:2.0.0.18-1.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
firefoxRed Hat:enterprise_linux:4::as |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::as |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::as |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::desktop |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::desktop |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::es |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::es |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::es |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::ws |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::ws |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
nssRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
devhelpRed Hat:enterprise_linux:5::client |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
firefoxRed Hat:enterprise_linux:5::client |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
nssRed Hat:enterprise_linux:5::client |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-toolsRed Hat:enterprise_linux:5::client |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::client |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
yelpRed Hat:enterprise_linux:5::client |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
devhelpRed Hat:enterprise_linux:5::server |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-develRed Hat:enterprise_linux:5::server |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
firefoxRed Hat:enterprise_linux:5::server |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
nssRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-develRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-toolsRed Hat:enterprise_linux:5::server |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::server |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
yelpRed Hat:enterprise_linux:5::server |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
MozillaThunderbirdopenSUSE:Tumbleweed |
before 91.1.1-1.1 | 91.1.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5014 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published November 13, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.87%, the 93rd percentile. Fixed in xulrunner 1.8.0.15~pre080614h-0etch1.
References
secunia.com/advisories/32011
vupen.com/english/advisories/2008/3146
debian.org/security/2009/dsa-1697
bugzilla.mozilla.org/show_bug.cgi?id=436741
securityfocus.com/bid/32281
Show 194 moreShow less
redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
mandriva.com/security/advisories?name=MDVSA-2008:230
securitytracker.com/id?1021182
mozilla.org/security/announce/2008/mfsa2008-50.html
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
us-cert.gov/cas/techalerts/TA08-319A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9157
ubuntu.com/usn/usn-667-1
nvd.nist.gov/vuln/detail/CVE-2008-5014
github.com/advisories/GHSA-8m88-6wvj-46c6
access.redhat.com/errata/RHSA-2008:0976
bugzilla.redhat.com/show_bug.cgi?id=470864
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0976.json
cve.org/CVERecord?id=CVE-2008-5012
suse.com/security/cve/CVE-2007-3089
This page doesn't list everything
Left out here: 298 references. The JSON record has them.