CVE catalog

CVE-2008-1380

iceape - arbitrary code execution

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.90% · Oct 25, 2026

The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237. Firefox JavaScript garbage collection crash

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxulrunner4.01.8.0.11-2vulnerable
Debianxulrunner4.01.8.0.11-3vulnerable
Debianxulrunner4.01.8.0.11-4vulnerable
Debianxulrunner4.01.8.0.11-4.1vulnerable
Debianxulrunner4.01.8.0.12-0etch1vulnerable
Debianxulrunner4.01.8.0.13~pre070720-0etch1vulnerable
Debianxulrunner4.01.8.0.13~pre070720-0etch2vulnerable
Debianxulrunner4.01.8.0.13~pre070720-0etch3vulnerable
Debianxulrunner4.01.8.0.13~pre070720-0etch3+lenny1vulnerable
Debianxulrunner4.01.8.0.14~pre071019b-0etch1vulnerable
Debianxulrunner4.01.8.0.14~pre071019b-0lenny1vulnerable
Debianxulrunner4.01.8.0.14~pre071019c-0etch1vulnerable
Debianxulrunner4.01.8.0.15~pre080131a-0etch1vulnerable
Debianxulrunner4.01.8.0.15~pre080131b-0etch1vulnerable
Debianxulrunner4.01.8.0.15~pre080323b-0etch1vulnerable
Debianxulrunner4.01.8.0.15~pre080323b-0etch2fixed
Debianiceweasel4.02.0.0.10-0etch1vulnerable
Debianiceweasel4.02.0.0.10-1vulnerable
Debianiceweasel4.02.0.0.10-2vulnerable
Debianiceweasel4.02.0.0.11-1vulnerable
Debianiceweasel4.02.0.0.12-0etch1vulnerable
Debianiceweasel4.02.0.0.12-1vulnerable
Debianiceweasel4.02.0.0.12-2vulnerable
Debianiceweasel4.02.0.0.13-0etch1vulnerable
Debianiceweasel4.02.0.0.13-1vulnerable
Debianiceweasel4.02.0.0.3-1vulnerable
Debianiceweasel4.02.0.0.3-2vulnerable
Debianiceweasel4.02.0.0.4-0etch1vulnerable
Debianiceweasel4.02.0.0.4-1vulnerable
Debianiceweasel4.02.0.0.5-0etch1vulnerable
Debianiceweasel4.02.0.0.5-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.5-1vulnerable
Debianiceweasel4.02.0.0.5-2vulnerable
Debianiceweasel4.02.0.0.6+2.0.0.8-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.6-1vulnerable
Debianiceweasel4.02.0.0.7-1vulnerable
Debianiceweasel4.02.0.0.7-2vulnerable
Debianiceweasel4.02.0.0.8-1vulnerable
Debianiceweasel4.02.0.0.9-1vulnerable
Debianiceweasel4.02.0.0.9-2vulnerable
Debianiceweasel4.02.0.0.14-0etch1fixed
Debianiceape4.01.0.10~pre070720-0etch1vulnerable
Debianiceape4.01.0.10~pre070720-0etch1+lenny1vulnerable
Debianiceape4.01.0.10~pre070720-0etch3vulnerable
Debianiceape4.01.0.10~pre070720-0etch3+lenny1vulnerable
Debianiceape4.01.0.11~pre071022-0etch1vulnerable
Debianiceape4.01.0.11~pre071022-0etch1+lenny1vulnerable
Debianiceape4.01.0.12~pre080131b-0etch1vulnerable
Debianiceape4.01.0.12~pre080131b-0etch2vulnerable
Debianiceape4.01.0.13~pre080323b-0etch1vulnerable
Debianiceape4.01.0.13~pre080323b-0etch2vulnerable
Debianiceape4.01.0.8-4vulnerable
Debianiceape4.01.0.9-0etch1vulnerable
Debianiceape4.01.0.13~pre080323b-0etch3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxulrunnerdeb4.01.8.0.15~pre080323b-0etch2Not reportedDSA-1558-1Not reported
Debianiceweaseldeb4.02.0.0.14-0etch1Not reportedDSA-1555-1Not reported
Debianiceapedeb4.01.0.13~pre080323b-0etch3Not reportedDSA-1562-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]