CVE-2008-4064: Integer Overflow
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairosurfacesetdeviceoffset function, (2) integer overflows when handling animated PNG data in the infocallback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4064?
CVE-2008-4064 is considered to have a high severity due to potential remote code execution and denial of service risks.
Which versions of Firefox are affected by CVE-2008-4064?
Mozilla Firefox versions before 3.0.2, including 3.0 and up to 3.0.1, are affected by CVE-2008-4064.
How do I fix CVE-2008-4064?
To patch CVE-2008-4064, upgrade to Mozilla Firefox version 3.0.2 or later.
What types of issues does CVE-2008-4064 cause?
CVE-2008-4064 can lead to memory corruption, application crashes, and potentially arbitrary code execution.
Can CVE-2008-4064 be exploited remotely?
Yes, CVE-2008-4064 can be exploited remotely through specific vectors related to graphics rendering.