Opisy CVE

nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.

Informacje CVE

Powiązane słabości

CWE-ID	Nazwa słabości	Źródło
CWE-362	Concurrent Execution using Shared Resource with Improper Synchronization The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Metryki

Metryki	Wynik	Stopień zagrożenia	CVSS Wektor	Źródło
V2	9.3		AV:N/AC:M/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS to model oceniający, który przewiduje prawdopodobieństwo wykorzystania podatności.

Wynik EPSS

Model EPSS generuje wynik prawdopodobieństwa w zakresie od 0 do 1 (0–100%). Im wyższy wynik, tym większe prawdopodobieństwo, że podatność zostanie wykorzystana.

Percentyl EPSS

Percentyl służy do rankingowania CVE według wyniku EPSS. Na przykład CVE w 95. percentylu według wyniku EPSS jest bardziej prawdopodobne do wykorzystania niż 95% innych CVE. Percentyl umożliwia porównanie wyniku EPSS danego CVE z wynikami innych CVE.

EPSS First.org

Wspomniane produkty

Konfiguracja 0

Mozilla>>Firefox >> Version Od (włącznie) 2.0 Do (wyłącznie) 2.0.0.18

Mozilla>>Firefox >> Version Od (włącznie) 3.0 Do (wyłącznie) 3.0.4

Mozilla>>Seamonkey >> Version Od (włącznie) 1.0 Do (wyłącznie) 1.1.13

Mozilla>>Thunderbird >> Version Od (włącznie) 2.0 Do (wyłącznie) 2.0.0.18

Konfiguracja 0

Debian>>Debian_linux >> Version 4.0

Konfiguracja 0

Canonical>>Ubuntu_linux >> Version 6.06

Canonical>>Ubuntu_linux >> Version 7.10

Canonical>>Ubuntu_linux >> Version 8.04

Canonical>>Ubuntu_linux >> Version 8.10

Konfiguracja 0

Fedoraproject>>Fedora >> Version 8

Fedoraproject>>Fedora >> Version 9

Konfiguracja 0

Suse>>Linux_enterprise_debuginfo >> Version 10

Novell>>Linux_desktop >> Version 9

Novell>>Open_enterprise_server >> Version -

Opensuse>>Opensuse >> Version 10.2

Opensuse>>Opensuse >> Version 10.3

Opensuse>>Opensuse >> Version 11.0

Suse>>Linux_enterprise_desktop >> Version 10

Suse>>Linux_enterprise_server >> Version 9

Suse>>Linux_enterprise_server >> Version 10

Suse>>Linux_enterprise_software_development_kit >> Version 10

Odniesienia

http://www.vupen.com/english/advisories/2008/3146
Tags : vdb-entry, x_refsource_VUPEN

http://www.debian.org/security/2009/dsa-1697
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.debian.org/security/2008/dsa-1671
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.securityfocus.com/bid/32281
Tags : vdb-entry, x_refsource_BID

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/32713
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2008-0977.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.mandriva.com/security/advisories?name=MDVSA-2008:230
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.vupen.com/english/advisories/2009/0977
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/32695
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2008-0978.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.debian.org/security/2008/dsa-1669
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/32778
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2008-0976.html
Tags : vendor-advisory, x_refsource_REDHAT

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/33433
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.mozilla.org/security/announce/2008/mfsa2008-55.html
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/32694
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/32721
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.us-cert.gov/cas/techalerts/TA08-319A.html
Tags : third-party-advisory, x_refsource_CERT

https://bugzilla.mozilla.org/show_bug.cgi?id=460002
Tags : x_refsource_MISC

http://secunia.com/advisories/32853
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2009/dsa-1696
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.securitytracker.com/id?1021186
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/32715
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/32693
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDVSA-2008:228
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/32845
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDVSA-2008:235
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/33434
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/32798
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/32684
Tags : third-party-advisory, x_refsource_SECUNIA

http://ubuntu.com/usn/usn-667-1
Tags : vendor-advisory, x_refsource_UBUNTU

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9642
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/32714
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/34501
Tags : third-party-advisory, x_refsource_SECUNIA

Data	Percentyl
2022-02-06	79%
2022-04-03	91%
2023-02-05	94%
2023-02-19	91%
2023-02-26	92%
2023-03-12	99%
2023-05-14	99%
2023-08-06	99%
2024-02-04	98%
2024-06-02	98%
2024-06-02	98%
2024-07-28	99%
2024-08-04	98%
2024-08-11	99%
2024-11-24	99%
2024-12-22	98%
2024-12-29	98%
2025-01-19	98%
2025-02-02	98%
2025-02-02	98%
2025-03-16	98%
2025-03-18	94%
2025-03-30	94%
2025-06-01	94%
2025-07-01	95%
2025-07-29	96%
2026-04-12	96%

Data	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	6.6%	–	–
2022-04-03	–	–	6.6%	–	–
2023-02-05	–	–	9.92%	–	–
2023-02-19	–	–	6.6%	–	–
2023-02-26	–	–	6.6%	–	–
2023-03-12	–	–	–	95.8%	–
2023-05-14	–	–	–	95.58%	–
2023-08-06	–	–	–	95.37%	–
2024-02-04	–	–	–	84.16%	–
2024-06-02	–	–	–	83.61%	–
2024-06-02	–	–	–	83.61%	–
2024-07-28	–	–	–	83.61%	–
2024-08-04	–	–	–	83.61%	–
2024-08-11	–	–	–	83.61%	–
2024-11-24	–	–	–	82.83%	–
2024-12-22	–	–	–	70.29%	–
2024-12-29	–	–	–	67.24%	–
2025-01-19	–	–	–	67.24%	–
2025-02-02	–	–	–	75.35%	–
2025-02-02	–	–	–	75.35%	–
2025-03-16	–	–	–	63.56%	–
2025-03-18	–	–	–	–	13.32%
2025-03-30	–	–	–	–	14.94%
2025-06-01	–	–	–	–	16.2%
2025-07-01	–	–	–	–	16.2%
2025-07-29	–	–	–	–	25.26%
2026-04-12	–	–	–	–	23.76%

CVE-2008-5021 : Szczegóły

CVE-2008-5021

Opisy CVE

Informacje CVE

Powiązane słabości

Metryki

EPSS

Wynik EPSS

Percentyl EPSS

Wspomniane produkty

Konfiguracja 0

Konfiguracja 0

Konfiguracja 0

Konfiguracja 0

Konfiguracja 0

Odniesienia