CVE-2008-5014: Input Validation
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.proto.proto object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJISNATIVE function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5014?
CVE-2008-5014 has a moderate severity level, allowing for denial of service attacks and potential code execution.
How do I fix CVE-2008-5014?
To fix CVE-2008-5014, update Mozilla Firefox to version 3.0.2 or later, Thunderbird to version 2.0.0.18 or later, and SeaMonkey to version 1.1.13 or later.
Which software versions are affected by CVE-2008-5014?
CVE-2008-5014 affects Firefox versions prior to 3.0.2, Firefox 2.x versions before 2.0.0.18, Thunderbird versions before 2.0.0.18, and SeaMonkey versions before 1.1.13.
Can CVE-2008-5014 be exploited remotely?
Yes, CVE-2008-5014 can be exploited remotely by attackers to manipulate the window.__proto__.__proto__ object.
Is there a patch available for CVE-2008-5014?
Yes, patches are available through updates for the affected software to address the vulnerabilities in CVE-2008-5014.