CVE-2008-4063: Critical severity ubuntu vulnerability
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4063?
CVE-2008-4063 has been classified as a high severity vulnerability due to its potential for remote code execution and denial of service.
How do I fix CVE-2008-4063?
To fix CVE-2008-4063, update Mozilla Firefox to version 3.0.2 or later.
What versions of Mozilla Firefox are affected by CVE-2008-4063?
CVE-2008-4063 affects Mozilla Firefox versions up to 3.0.1 inclusive.
Does CVE-2008-4063 affect Ubuntu users?
Yes, CVE-2008-4063 affects Ubuntu users running versions 6.06, 7.04, 7.10, and 8.04 with the susceptible Firefox versions installed.
What types of attacks can CVE-2008-4063 enable?
CVE-2008-4063 can enable remote attackers to cause memory corruption, application crashes, or potentially execute arbitrary code.