CVE catalog

CVE-2008-0419

iceweasel - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.80% · Oct 25, 2026

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel4.02.0.0.10-0etch1vulnerable
Debianiceweasel4.02.0.0.10-1vulnerable
Debianiceweasel4.02.0.0.10-2vulnerable
Debianiceweasel4.02.0.0.11-1vulnerable
Debianiceweasel4.02.0.0.3-1vulnerable
Debianiceweasel4.02.0.0.3-2vulnerable
Debianiceweasel4.02.0.0.4-0etch1vulnerable
Debianiceweasel4.02.0.0.4-1vulnerable
Debianiceweasel4.02.0.0.5-0etch1vulnerable
Debianiceweasel4.02.0.0.5-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.5-1vulnerable
Debianiceweasel4.02.0.0.5-2vulnerable
Debianiceweasel4.02.0.0.6+2.0.0.8-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.6-1vulnerable
Debianiceweasel4.02.0.0.7-1vulnerable
Debianiceweasel4.02.0.0.7-2vulnerable
Debianiceweasel4.02.0.0.8-1vulnerable
Debianiceweasel4.02.0.0.9-1vulnerable
Debianiceweasel4.02.0.0.9-2vulnerable
Debianiceweasel4.02.0.0.12-0etch1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb4.02.0.0.12-0etch1Not reportedDSA-1489-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References