Vulnerability Description
The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | >= 2.0, < 2.0.0.19 |
| Mozilla | Seamonkey | >= 1.0, < 1.1.14 |
| Mozilla | Thunderbird | >= 2.0, < 2.0.0.19 |
| Canonical | Ubuntu Linux | 7.10 |
| Debian | Debian Linux | 4.0 |
References
- http://secunia.com/advisories/33184Third Party Advisory
- http://secunia.com/advisories/33188Third Party Advisory
- http://secunia.com/advisories/33203Third Party Advisory
- http://secunia.com/advisories/33204Third Party Advisory
- http://secunia.com/advisories/33205Third Party Advisory
- http://secunia.com/advisories/33216Third Party Advisory
- http://secunia.com/advisories/33231Third Party Advisory
- http://secunia.com/advisories/33408Third Party Advisory
- http://secunia.com/advisories/33523Third Party Advisory
- http://secunia.com/advisories/34501Third Party Advisory
- http://secunia.com/advisories/35080Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1Broken Link
- http://www.debian.org/security/2009/dsa-1707Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244Third Party Advisory
FAQ
What is CVE-2008-5510?
CVE-2008-5510 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow ...
How severe is CVE-2008-5510?
CVE-2008-5510 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-5510?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Seamonkey, Mozilla Thunderbird, Canonical Ubuntu Linux, Debian Debian Linux.