CVE-2008-5013: Critical severity mozilla seamonkey vulnerability
Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5013?
CVE-2008-5013 is rated as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2008-5013?
To fix CVE-2008-5013, update Firefox to version 2.0.0.18 or later, or SeaMonkey to version 1.1.13 or later.
What types of systems are affected by CVE-2008-5013?
CVE-2008-5013 affects Mozilla Firefox versions prior to 2.0.0.18 and SeaMonkey versions prior to 1.1.13.
What kind of attack does CVE-2008-5013 facilitate?
CVE-2008-5013 can enable remote attackers to execute arbitrary code via crafted SWF files.
Can users running updated versions be safe from CVE-2008-5013?
Yes, users who have upgraded to the latest versions after the patches are not vulnerable to CVE-2008-5013.