CVE-2008-0017
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2...
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
9.3
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
- Record
CVE-2008-0017- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
- Record
CVE-2008-0017- Updated
- 2026-11-02
EUVDEUVD-2008-0030 No score
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
- Record
EUVD-2008-0030- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4386-5g32-qp3p No score
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2...
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
- Record
GHSA-4386-5g32-qp3p- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 From an advisory covering 28 CVEs |
before 1.8.0.15~pre080614h-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 12 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny11.8.0.14~pre071019c-0etch11.8.0.15~pre080131a-0etch11.8.0.15~pre080131b-0etch11.8.0.15~pre080323b-0etch11.8.0.15~pre080323b-0etch21.8.0.15~pre080614d-0etch1 |
1.8.0.15~pre080614h-0etch1 |
iceweaselDebian:4.0 From an advisory covering 13 CVEs |
before 2.0.0.18-0etch1, plus listed versions 2.0.0.10-0etch12.0.0.10-12.0.0.10-22.0.0.11-12.0.0.12-0etch1 Show 27 moreShow less2.0.0.12-12.0.0.12-22.0.0.13-0etch12.0.0.13-12.0.0.14-0etch12.0.0.14-12.0.0.14-22.0.0.15-0etch12.0.0.16-0etch12.0.0.17-0etch12.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.18-0etch1 |
iceapeDebian:4.0 From an advisory covering 47 CVEs |
before 1.0.13~pre080614i-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1 Show 8 moreShow less1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.13~pre080323b-0etch11.0.13~pre080323b-0etch21.0.13~pre080323b-0etch31.0.8-41.0.9-0etch1 |
1.0.13~pre080614i-0etch1 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
Show 163 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.21.el2 | 0:1.0.9-0.21.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 13 CVEs |
before 0:1.0.9-0.25.el3 | 0:1.0.9-0.25.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 13 CVEs |
before 0:1.0.9-28.el4 | 0:1.0.9-28.el4 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.0.4-1.el4 | 0:3.0.4-1.el4 |
nssRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
nss-develRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el4 | 0:3.12.1.1-3.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
nssRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
devhelpRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
nssRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-toolsRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
yelpRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
devhelpRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
devhelp-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:0.12-20.el5 | 0:0.12-20.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.0.4-1.el5 | 0:3.0.4-1.el5 |
nssRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
nss-toolsRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.1.1-3.el5 | 0:3.12.1.1-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9.0.4-1.el5 | 0:1.9.0.4-1.el5 |
yelpRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:2.16.0-22.el5 | 0:2.16.0-22.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0017 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published November 13, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.68%, the 94th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2008/3146
securitytracker.com/id?1021185
debian.org/security/2009/dsa-1697
bugzilla.mozilla.org/show_bug.cgi?id=443299
debian.org/security/2008/dsa-1671
securityfocus.com/bid/32281
Show 91 moreShow less
redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
secunia.com/advisories/32713
redhat.com/support/errata/RHSA-2008-0977.html
mandriva.com/security/advisories?name=MDVSA-2008:230
vupen.com/english/advisories/2009/0977
mozilla.org/security/announce/2008/mfsa2008-54.html
secunia.com/advisories/32695
redhat.com/support/errata/RHSA-2008-0978.html
debian.org/security/2008/dsa-1669
secunia.com/advisories/32778
redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
secunia.com/advisories/33433
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
secunia.com/advisories/32694
secunia.com/advisories/32721
us-cert.gov/cas/techalerts/TA08-319A.html
secunia.com/advisories/32853
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11005
secunia.com/advisories/32693
mandriva.com/security/advisories?name=MDVSA-2008:228
secunia.com/advisories/32845
iss.net/threats/311.html
secunia.com/advisories/32684
ubuntu.com/usn/usn-667-1
secunia.com/advisories/32714
secunia.com/advisories/34501
nvd.nist.gov/vuln/detail/CVE-2008-0017
github.com/advisories/GHSA-4386-5g32-qp3p
access.redhat.com/errata/RHSA-2008:0977
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=470864
bugzilla.redhat.com/show_bug.cgi?id=470867
bugzilla.redhat.com/show_bug.cgi?id=470873
bugzilla.redhat.com/show_bug.cgi?id=470881
bugzilla.redhat.com/show_bug.cgi?id=470883
bugzilla.redhat.com/show_bug.cgi?id=470884
bugzilla.redhat.com/show_bug.cgi?id=470889
bugzilla.redhat.com/show_bug.cgi?id=470892
bugzilla.redhat.com/show_bug.cgi?id=470894
bugzilla.redhat.com/show_bug.cgi?id=470895
bugzilla.redhat.com/show_bug.cgi?id=470898
bugzilla.redhat.com/show_bug.cgi?id=470902
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0977.json
access.redhat.com/security/cve/CVE-2008-0017
cve.org/CVERecord?id=CVE-2008-0017
access.redhat.com/security/cve/CVE-2008-5012
cve.org/CVERecord?id=CVE-2008-5012
nvd.nist.gov/vuln/detail/CVE-2008-5012
access.redhat.com/security/cve/CVE-2008-5013
cve.org/CVERecord?id=CVE-2008-5013
nvd.nist.gov/vuln/detail/CVE-2008-5013
access.redhat.com/security/cve/CVE-2008-5014
cve.org/CVERecord?id=CVE-2008-5014
nvd.nist.gov/vuln/detail/CVE-2008-5014
access.redhat.com/security/cve/CVE-2008-5016
cve.org/CVERecord?id=CVE-2008-5016
nvd.nist.gov/vuln/detail/CVE-2008-5016
access.redhat.com/security/cve/CVE-2008-5017
cve.org/CVERecord?id=CVE-2008-5017
nvd.nist.gov/vuln/detail/CVE-2008-5017
access.redhat.com/security/cve/CVE-2008-5018
cve.org/CVERecord?id=CVE-2008-5018
nvd.nist.gov/vuln/detail/CVE-2008-5018
access.redhat.com/security/cve/CVE-2008-5019
cve.org/CVERecord?id=CVE-2008-5019
nvd.nist.gov/vuln/detail/CVE-2008-5019
access.redhat.com/security/cve/CVE-2008-5021
cve.org/CVERecord?id=CVE-2008-5021
nvd.nist.gov/vuln/detail/CVE-2008-5021
access.redhat.com/security/cve/CVE-2008-5022
cve.org/CVERecord?id=CVE-2008-5022
nvd.nist.gov/vuln/detail/CVE-2008-5022
access.redhat.com/security/cve/CVE-2008-5023
cve.org/CVERecord?id=CVE-2008-5023
nvd.nist.gov/vuln/detail/CVE-2008-5023
access.redhat.com/security/cve/CVE-2008-5024
cve.org/CVERecord?id=CVE-2008-5024
nvd.nist.gov/vuln/detail/CVE-2008-5024
access.redhat.com/security/cve/CVE-2008-5052
bugzilla.redhat.com/show_bug.cgi?id=1618336
cve.org/CVERecord?id=CVE-2008-5052
nvd.nist.gov/vuln/detail/CVE-2008-5052
access.redhat.com/errata/RHSA-2008:0978
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=454283
bugzilla.redhat.com/show_bug.cgi?id=470876
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0978.json
access.redhat.com/security/cve/CVE-2008-5015
cve.org/CVERecord?id=CVE-2008-5015
nvd.nist.gov/vuln/detail/CVE-2008-5015