CVE catalog

CVE-2008-0417

iceweasel - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.44% · Oct 25, 2026

CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel4.02.0.0.10-0etch1vulnerable
Debianiceweasel4.02.0.0.10-1vulnerable
Debianiceweasel4.02.0.0.10-2vulnerable
Debianiceweasel4.02.0.0.11-1vulnerable
Debianiceweasel4.02.0.0.3-1vulnerable
Debianiceweasel4.02.0.0.3-2vulnerable
Debianiceweasel4.02.0.0.4-0etch1vulnerable
Debianiceweasel4.02.0.0.4-1vulnerable
Debianiceweasel4.02.0.0.5-0etch1vulnerable
Debianiceweasel4.02.0.0.5-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.5-1vulnerable
Debianiceweasel4.02.0.0.5-2vulnerable
Debianiceweasel4.02.0.0.6+2.0.0.8-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.6-1vulnerable
Debianiceweasel4.02.0.0.7-1vulnerable
Debianiceweasel4.02.0.0.7-2vulnerable
Debianiceweasel4.02.0.0.8-1vulnerable
Debianiceweasel4.02.0.0.9-1vulnerable
Debianiceweasel4.02.0.0.9-2vulnerable
Debianiceweasel4.02.0.0.12-0etch1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb4.02.0.0.12-0etch1Not reportedDSA-1489-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]