CVE-2008-4324: Null Pointer Dereference

Published Sep 29, 2008

Updated

The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events. NOTE: it was later reported that Firefox 3.0.2 on Mac OS X 10.5 is also affected.

Affected Software

2 affected components

Mozilla Firefox=3.0.3

Microsoft Windows XP=sp2

Event History

Sep 29, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

08:09 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-4324?

CVE-2008-4324 is classified as a denial of service vulnerability, allowing attackers to crash Mozilla Firefox 3.0.3.

How do I fix CVE-2008-4324?

To fix CVE-2008-4324, users should upgrade their Mozilla Firefox from version 3.0.3 to a newer release that includes the patch.

Which versions of Firefox are affected by CVE-2008-4324?

CVE-2008-4324 specifically affects Mozilla Firefox version 3.0.3 on Windows XP SP2.

What types of attacks are possible with CVE-2008-4324?

CVE-2008-4324 allows remote attackers to initiate a denial of service through specific user interface events.

When was CVE-2008-4324 first reported?

CVE-2008-4324 was first reported on 2008-09-15.