← voltar
CVE-2008-2807

CVE-2008-2807

EPSS 1.6%
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.htmlhttp://rhn.redhat.com/errata/RHSA-2008-0616.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=397093http://secunia.com/advisories/30878http://secunia.com/advisories/30898http://secunia.com/advisories/30903http://secunia.com/advisories/30911http://secunia.com/advisories/30949http://secunia.com/advisories/31005http://secunia.com/advisories/31008http://secunia.com/advisories/31021http://secunia.com/advisories/31023