CVE catalog
CVE-2008-0016
icedove - several vulnerabilities
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 43.92% · Oct 25, 2026
Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | iceweasel | 4.0 | 2.0.0.10-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.10-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.10-2 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.11-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.12-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.12-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.12-2 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.13-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.13-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.14-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.14-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.14-2 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.15-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.16-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.3-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.3-2 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.4-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.4-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.5-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.5-0etch1+lenny1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.5-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.5-2 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.6+2.0.0.8-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.6-0etch1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.6-0etch1+lenny1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.6-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.7-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.7-2 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.8-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.9-1 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.9-2 | vulnerable |
| Debian | iceweasel | 4.0 | 2.0.0.17-0etch1 | fixed |
| Debian | xulrunner | 4.0 | 1.8.0.11-2 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.11-3 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.11-4 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.11-4.1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.12-0etch1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.13~pre070720-0etch1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.13~pre070720-0etch2 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.13~pre070720-0etch3 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.13~pre070720-0etch3+lenny1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.14~pre071019b-0etch1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.14~pre071019b-0lenny1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.14~pre071019c-0etch1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.15~pre080131a-0etch1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.15~pre080131b-0etch1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.15~pre080323b-0etch1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.15~pre080323b-0etch2 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.15~pre080614d-0etch1 | vulnerable |
| Debian | xulrunner | 4.0 | 1.8.0.15~pre080614h-0etch1 | fixed |
| Debian | icedove | 4.0 | 1.5.0.10.dfsg1-3 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.12.dfsg1-0etch1 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.12.dfsg1-0etch1+lenny1 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.13+1.5.0.14b.dfsg1-0etch1 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.13+1.5.0.14b.dfsg1-0lenny1 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.13+1.5.0.15a.dfsg1-0etch1 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch1 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.13+1.5.0.15b.dfsg1-0etch1 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.13+1.5.0.15b.dfsg1-0etch2 | vulnerable |
| Debian | icedove | 4.0 | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | iceweasel | deb | 4.0 | 2.0.0.17-0etch1 | Not reported | DSA-1649-1 | Not reported |
| Debian | xulrunner | deb | 4.0 | 1.8.0.15~pre080614h-0etch1 | Not reported | DSA-1669-1 | Not reported |
| Debian | icedove | deb | 4.0 | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 | Not reported | DSA-1696-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://access.redhat.com/errata/RHSA-2008:0882]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10601-1.json]
- [https://osv.dev/vulnerability/DSA-1649-1]
- [https://osv.dev/vulnerability/DSA-1669-1]
- [https://osv.dev/vulnerability/DSA-1696-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]