{"id":"CVE-2008-0420","aliases":["DSA-1484-1","DSA-1534-1","EUVD-2008-0430","GHSA-6cgj-54pv-ggm2","RHSA-2008:0103","RHSA-2008:0104","RHSA-2008:0105"],"status":"published","title":"modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird...","description":"modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02224,"percentile":0.8283,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2008-02-10T00:00:00Z","modified":"2026-06-26T10:08:29Z","affected":[{"source":"osv","ecosystem":"Debian:4.0","package":"xulrunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.15~pre080131b-0etch1"}]}],"versions":["1.8.0.11-2","1.8.0.11-3","1.8.0.11-4","1.8.0.11-4.1","1.8.0.12-0etch1","1.8.0.13~pre070720-0etch1","1.8.0.13~pre070720-0etch2","1.8.0.13~pre070720-0etch3","1.8.0.13~pre070720-0etch3+lenny1","1.8.0.14~pre071019b-0etch1","1.8.0.14~pre071019b-0lenny1","1.8.0.14~pre071019c-0etch1","1.8.0.15~pre080131a-0etch1"],"bundled":13},{"source":"osv","ecosystem":"Debian:4.0","package":"iceape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.13~pre080323b-0etch1"}]}],"versions":["1.0.10~pre070720-0etch1","1.0.10~pre070720-0etch1+lenny1","1.0.10~pre070720-0etch3","1.0.10~pre070720-0etch3+lenny1","1.0.11~pre071022-0etch1","1.0.11~pre071022-0etch1+lenny1","1.0.12~pre080131b-0etch1","1.0.12~pre080131b-0etch2","1.0.8-4","1.0.9-0etch1"],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-0.10.el4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-0.10.el4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-0.10.el4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-0.10.el4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-0.10.el4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-0.10.el4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-0.10.el4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-0.10.el4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-9.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-9.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-9.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-9.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"seamonkey-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-0.9.el3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-chat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-dom-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-js-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"seamonkey-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-9.el4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el5"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el5"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el5"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0.12-8.el5"}]}],"bundled":10}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"seamonkey"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"http://www.ubuntu.com/usn/usn-582-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://browser.netscape.com/releasenotes/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/488264/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://secunia.com/advisories/30620","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40491","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.ubuntu.com/usn/usn-582-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://secunia.com/advisories/29167","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408076","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-07.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27826","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40606","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1019434","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://secunia.com/advisories/28758","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/29098","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://usn.ubuntu.com/576-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0420","tags":["advisory"]},{"url":"https://usn.ubuntu.com/576-1"},{"url":"http://browser.netscape.com/releasenotes"},{"url":"https://github.com/advisories/GHSA-6cgj-54pv-ggm2"},{"url":"https://access.redhat.com/errata/RHSA-2008:0103","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431756","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0103.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0412","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0412","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0413","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0413","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0415","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0415","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0415","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0416","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0417","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0418","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0418","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0418","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0419","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0420","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0591","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0591","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0592","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0592","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0593","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0593","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0104","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0104.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435123","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0304","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0105","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0105.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-0420","description":"modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.","status":"published","published":"2008-02-12T02:00:00Z","modified":"2024-08-07T07:46:54.461Z","updated_at":"2026-11-02T14:34:48.867091Z"}],"euvd":[{"id":"EUVD-2008-0430","description":"modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.","status":"published","published":"2008-02-12T02:00:00Z","modified":"2024-08-07T07:46:54Z","updated_at":"2026-11-03T01:39:05.878106Z"}],"ghsa":[{"id":"GHSA-6cgj-54pv-ggm2","title":"modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird...","description":"modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.","status":"published","published":"2022-05-01T23:30:10Z","modified":"2025-04-09T03:52:23Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:00:56.572949Z"}],"nvd":[{"id":"CVE-2008-0420","description":"modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.","status":"published","published":"2008-02-12T03:00:00Z","modified":"2026-06-16T22:49:36.093Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:01:25.307768Z"}],"osv":[{"id":"DSA-1484-1","title":"xulrunner - several vulnerabilities","status":"published","published":"2008-02-10T00:00:00Z","modified":"2026-03-09T01:01:38.12323Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DSA-1534-1","title":"iceape","status":"published","published":"2008-03-28T00:00:00Z","modified":"2026-03-09T01:23:02.170299Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"RHSA-2008:0103","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-15T17:11:20Z","modified":"2026-06-26T10:08:28Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2008:0104","title":"Red Hat Security Advisory: seamonkey security update","status":"published","published":"2024-09-15T17:11:26Z","modified":"2026-06-26T10:08:29Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2008:0105","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-15T17:11:30Z","modified":"2026-06-26T10:08:29Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}