CVE-2008-5715: Input Validation
Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property (aka location.hash). NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU consumption and application hang in unspecified circumstances perhaps involving other platforms.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5715?
CVE-2008-5715 is classified as a denial of service vulnerability that can cause application crashes.
How do I fix CVE-2008-5715?
To mitigate CVE-2008-5715, update Mozilla Firefox to the latest version that is not affected by this vulnerability.
What versions of Firefox are affected by CVE-2008-5715?
CVE-2008-5715 specifically affects Mozilla Firefox versions prior to 3.0.6.
Can CVE-2008-5715 affect other operating systems besides Windows Vista?
While CVE-2008-5715 is noted for impacting Windows Vista, it may also affect earlier versions of the browser on other operating systems.
What causes the issue in CVE-2008-5715?
CVE-2008-5715 is triggered by JavaScript code that includes a long string value for the hash property, leading to an application crash.