CVE-2008-5017: Integer Overflow
Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5017?
CVE-2008-5017 is classified as a denial of service vulnerability that can cause a crash in affected applications.
How do I fix CVE-2008-5017?
To fix CVE-2008-5017, upgrade to Mozilla Firefox version 3.0.4 or later, Thunderbird version 2.0.0.18 or later, or SeaMonkey version 1.1.13 or later.
Which software is affected by CVE-2008-5017?
CVE-2008-5017 affects Mozilla Firefox versions prior to 3.0.4, Thunderbird versions prior to 2.0.0.18, and SeaMonkey versions prior to 1.1.13.
Can CVE-2008-5017 be exploited remotely?
Yes, CVE-2008-5017 can be exploited remotely by attackers to cause a denial of service.
What type of attack does CVE-2008-5017 facilitate?
CVE-2008-5017 facilitates denial of service attacks by allowing attackers to crash the affected applications.