CVE catalog

CVE-2008-0412

icedove - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.30% · Oct 25, 2026

The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel4.02.0.0.10-0etch1vulnerable
Debianiceweasel4.02.0.0.10-1vulnerable
Debianiceweasel4.02.0.0.10-2vulnerable
Debianiceweasel4.02.0.0.11-1vulnerable
Debianiceweasel4.02.0.0.3-1vulnerable
Debianiceweasel4.02.0.0.3-2vulnerable
Debianiceweasel4.02.0.0.4-0etch1vulnerable
Debianiceweasel4.02.0.0.4-1vulnerable
Debianiceweasel4.02.0.0.5-0etch1vulnerable
Debianiceweasel4.02.0.0.5-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.5-1vulnerable
Debianiceweasel4.02.0.0.5-2vulnerable
Debianiceweasel4.02.0.0.6+2.0.0.8-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.6-1vulnerable
Debianiceweasel4.02.0.0.7-1vulnerable
Debianiceweasel4.02.0.0.7-2vulnerable
Debianiceweasel4.02.0.0.8-1vulnerable
Debianiceweasel4.02.0.0.9-1vulnerable
Debianiceweasel4.02.0.0.9-2vulnerable
Debianiceweasel4.02.0.0.12-0etch1fixed
Debianiceape4.01.0.10~pre070720-0etch1vulnerable
Debianiceape4.01.0.10~pre070720-0etch1+lenny1vulnerable
Debianiceape4.01.0.10~pre070720-0etch3vulnerable
Debianiceape4.01.0.10~pre070720-0etch3+lenny1vulnerable
Debianiceape4.01.0.11~pre071022-0etch1vulnerable
Debianiceape4.01.0.11~pre071022-0etch1+lenny1vulnerable
Debianiceape4.01.0.8-4vulnerable
Debianiceape4.01.0.9-0etch1vulnerable
Debianiceape4.01.0.12~pre080131b-0etch1fixed
Debianxulrunner4.01.8.0.11-2vulnerable
Debianxulrunner4.01.8.0.11-3vulnerable
Debianxulrunner4.01.8.0.11-4vulnerable
Debianxulrunner4.01.8.0.11-4.1vulnerable
Debianxulrunner4.01.8.0.12-0etch1vulnerable
Debianxulrunner4.01.8.0.13~pre070720-0etch1vulnerable
Debianxulrunner4.01.8.0.13~pre070720-0etch2vulnerable
Debianxulrunner4.01.8.0.13~pre070720-0etch3vulnerable
Debianxulrunner4.01.8.0.13~pre070720-0etch3+lenny1vulnerable
Debianxulrunner4.01.8.0.14~pre071019b-0etch1vulnerable
Debianxulrunner4.01.8.0.14~pre071019b-0lenny1vulnerable
Debianxulrunner4.01.8.0.14~pre071019c-0etch1vulnerable
Debianxulrunner4.01.8.0.15~pre080131a-0etch1vulnerable
Debianxulrunner4.01.8.0.15~pre080131b-0etch1fixed
Debianicedove4.01.5.0.10.dfsg1-3vulnerable
Debianicedove4.01.5.0.12.dfsg1-0etch1vulnerable
Debianicedove4.01.5.0.12.dfsg1-0etch1+lenny1vulnerable
Debianicedove4.01.5.0.13+1.5.0.14b.dfsg1-0etch1vulnerable
Debianicedove4.01.5.0.13+1.5.0.14b.dfsg1-0lenny1vulnerable
Debianicedove4.01.5.0.13+1.5.0.15a.dfsg1-0etch1vulnerable
Debianicedove4.01.5.0.13+1.5.0.15b.dfsg1-0etch1vulnerable
Debianicedove4.01.5.0.13+1.5.0.15b.dfsg1-0etch2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb4.02.0.0.12-0etch1Not reportedDSA-1489-1Not reported
Debianiceapedeb4.01.0.12~pre080131b-0etch1Not reportedDSA-1506-1Not reported
Debianxulrunnerdeb4.01.8.0.15~pre080131b-0etch1Not reportedDSA-1484-1Not reported
Debianicedovedeb4.01.5.0.13+1.5.0.15b.dfsg1-0etch2Not reportedDSA-1485-2Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]