Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2008-5013 | Mondoo Vulnerability Intelligence

CVE-2008-5013

UNKNOWN

Mozilla Firefox 2

Published Nov 13, 2008

Modified 1 years ago

No fix available

Details

Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.

References

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html ADVISORYhttp://secunia.com/advisories/32684 ADVISORYhttp://secunia.com/advisories/32693 ADVISORYhttp://secunia.com/advisories/32694 ADVISORYhttp://secunia.com/advisories/32714 ADVISORYhttp://secunia.com/advisories/32778 ADVISORYhttp://secunia.com/advisories/32845 ADVISORYhttp://secunia.com/advisories/32853 ADVISORYhttp://secunia.com/advisories/33433 ADVISORYhttp://secunia.com/advisories/34501 ADVISORYhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 ADVISORYhttp://ubuntu.com/usn/usn-667-1 ADVISORYhttp://www.debian.org/security/2008/dsa-1669 ADVISORYhttp://www.debian.org/security/2008/dsa-1671 ADVISORYhttp://www.debian.org/security/2009/dsa-1697 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:228 WEBhttp://www.mozilla.org/security/announce/2008/mfsa2008-49.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0977.html WEBhttp://www.securityfocus.com/bid/32281 WEBhttp://www.securitytracker.com/id?1021181 ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA08-319A.html WEBhttp://www.vupen.com/english/advisories/2008/3146 WEBhttp://www.vupen.com/english/advisories/2009/0977 WEBhttps://bugzilla.mozilla.org/show_bug.cgi?id=433610 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9660 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2008-5013 ADVISORYhttps://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html

CVSS Analysis

CVSS v2.0

9.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedNov 13, 2008

ModifiedAug 7, 2024