[Forgot Password]
Login  Register Subscribe

24003

 
 

131425

 
 

104705

 
 

909

 
 

84119

 
 

133

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2008-5508Date: (C)2008-12-17   (M)2017-10-04


Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 4.3
Exploit Score: Exploit Score: 8.6
Impact Score: Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: MEDIUM
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: NONE
Scope: Integrity: PARTIAL
Confidentiality: Availability: NONE
Integrity:  
Availability:  
  
Reference:
SECTRACK-1021426
SUNALERT-256408
SUNALERT-258748
BID-32882
SECUNIA-33184
SECUNIA-33188
SECUNIA-33189
SECUNIA-33203
SECUNIA-33204
SECUNIA-33205
SECUNIA-33216
SECUNIA-33231
SECUNIA-33408
SECUNIA-33415
SECUNIA-33421
SECUNIA-33433
SECUNIA-33434
SECUNIA-33523
SECUNIA-33547
SECUNIA-34501
SECUNIA-35080
ADV-2009-0977
DSA-1696
DSA-1697
DSA-1704
DSA-1707
MDVSA-2008:244
MDVSA-2008:245
MDVSA-2009:012
RHSA-2008:1036
RHSA-2008:1037
RHSA-2009:0002
USN-690-1
USN-690-2
USN-701-1
USN-701-2
http://www.mozilla.org/security/announce/2008/mfsa2008-66.html
https://bugzilla.mozilla.org/show_bug.cgi?id=425046
https://bugzilla.mozilla.org/show_bug.cgi?id=460803
mozilla-urlparsing-weak-security(47414)

CPE    59
cpe:/a:mozilla:thunderbird:2.0.0.18
cpe:/a:mozilla:thunderbird:2.0.0.14
cpe:/a:mozilla:thunderbird:2.0.0.16
cpe:/a:mozilla:thunderbird:2.0.0.17
...
CWE    1
CWE-20
OVAL    21
oval:org.secpod.oval:def:200409
oval:org.secpod.oval:def:400064
oval:org.secpod.oval:def:301350
oval:org.secpod.oval:def:500494
...

© 2013 SecPod Technologies