CVE-2008-5715

EPSS 8.5%

Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property (aka location.hash). NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU consumption and application hang in unspecified circumstances perhaps involving other platforms.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/7554unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/51032 http://securityreason.com/securityalert/4807 https://exchange.xforce.ibmcloud.com/vulnerabilities/47572 https://www.exploit-db.com/exploits/7554 http://websecurity.com.ua/3424/http://www.securityfocus.com/archive/1/506006/100/0/threaded http://www.securityfocus.com/bid/32988