← back
CVE-2008-5508

CVE-2008-5508

EPSS 2.2%
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.mozilla.org/show_bug.cgi?id=425046https://bugzilla.mozilla.org/show_bug.cgi?id=460803http://secunia.com/advisories/33184http://secunia.com/advisories/33188http://secunia.com/advisories/33189http://secunia.com/advisories/33203http://secunia.com/advisories/33204http://secunia.com/advisories/33205http://secunia.com/advisories/33216http://secunia.com/advisories/33231http://secunia.com/advisories/33408http://secunia.com/advisories/33415