The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and…
Priority MEDIUM 46CWE-399Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-399 and the CVSS impact.
Summary
The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.
Why it matters now
EPSS 0.03304 88th percentileScored 2026-11-07
Fix Fixed Red Hat: 3 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
Red Hat 3 advisories
- RHSA-2008:0103 Released 2008-02-08 · Red Hat rating Criticalfirefox security update
- Red Hat Enterprise Linux (v. 5 server) firefox-1.5.0.12-9.el5, firefox-1.5.0.12-9.el5.i386, firefox-1.5.0.12-9.el5.ia64 +1
- Red Hat Enterprise Linux AS version 4 firefox-1.5.0.12-0.10.el4, firefox-1.5.0.12-0.10.el4.i386, firefox-1.5.0.12-0.10.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-1.5.0.12-9.el5, firefox-1.5.0.12-9.el5.i386
- Red Hat Enterprise Linux Desktop version 4 firefox-1.5.0.12-0.10.el4, firefox-1.5.0.12-0.10.el4.i386
- Red Hat Enterprise Linux ES version 4 firefox-1.5.0.12-0.10.el4, firefox-1.5.0.12-0.10.el4.i386, firefox-1.5.0.12-0.10.el4.ia64
- Red Hat Enterprise Linux WS version 4 firefox-1.5.0.12-0.10.el4, firefox-1.5.0.12-0.10.el4.i386, firefox-1.5.0.12-0.10.el4.ia64
- RHSA-2008:0105 Released 2008-02-08 · Red Hat rating Criticalthunderbird security update
- Red Hat Enterprise Linux AS version 4 thunderbird-1.5.0.12-8.el4, thunderbird-1.5.0.12-8.el4.i386, thunderbird-1.5.0.12-8.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-1.5.0.12-8.el5, thunderbird-1.5.0.12-8.el5.i386
- Red Hat Enterprise Linux Desktop version 4 thunderbird-1.5.0.12-8.el4, thunderbird-1.5.0.12-8.el4.i386
- Red Hat Enterprise Linux ES version 4 thunderbird-1.5.0.12-8.el4, thunderbird-1.5.0.12-8.el4.i386, thunderbird-1.5.0.12-8.el4.ia64
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) thunderbird-1.5.0.12-8.el5, thunderbird-1.5.0.12-8.el5.i386
- Red Hat Enterprise Linux WS version 4 thunderbird-1.5.0.12-8.el4, thunderbird-1.5.0.12-8.el4.i386, thunderbird-1.5.0.12-8.el4.ia64
- RHSA-2008:0104 Released 2008-02-08 · Red Hat rating Criticalseamonkey security update
- Red Hat Desktop version 3 seamonkey-1.0.9-0.9.el3, seamonkey-1.0.9-0.9.el3.i386, seamonkey-chat-1.0.9-0.9.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.9.el2, seamonkey-1.0.9-0.9.el2.i386, seamonkey-1.0.9-0.9.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.9.el3, seamonkey-1.0.9-0.9.el3.i386, seamonkey-1.0.9-0.9.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-9.el4, seamonkey-1.0.9-9.el4.i386, seamonkey-1.0.9-9.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-9.el4, seamonkey-1.0.9-9.el4.i386, seamonkey-chat-1.0.9-9.el4 +9
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.9.el2, seamonkey-1.0.9-0.9.el2.i386, seamonkey-chat-1.0.9-0.9.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.9.el3, seamonkey-1.0.9-0.9.el3.i386, seamonkey-1.0.9-0.9.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-9.el4, seamonkey-1.0.9-9.el4.i386, seamonkey-1.0.9-9.el4.ia64 +15
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.9.el2, seamonkey-1.0.9-0.9.el2.i386, seamonkey-chat-1.0.9-0.9.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.9.el3, seamonkey-1.0.9-0.9.el3.i386, seamonkey-1.0.9-0.9.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-9.el4, seamonkey-1.0.9-9.el4.i386, seamonkey-1.0.9-9.el4.ia64 +15
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.9.el2, seamonkey-1.0.9-0.9.el2.ia64, seamonkey-chat-1.0.9-0.9.el2.ia64 +8
Vendor assessments
Red Hat
Red Hat rating: Critical. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2008:0104 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2008:0103 |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | Fixed | RHSA-2008:0104 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2008:0104 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2008:0103, RHSA-2008:0104, RHSA-2008:0105 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2008:0103, RHSA-2008:0105 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2008:0103, RHSA-2008:0104, RHSA-2008:0105 |
| Red Hat Enterprise Linux ES version 2.1 | Fixed | RHSA-2008:0104 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2008:0104 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2008:0103, RHSA-2008:0104, RHSA-2008:0105 |
| Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) | Fixed | RHSA-2008:0105 |
| Red Hat Enterprise Linux WS version 2.1 | Fixed | RHSA-2008:0104 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2008:0104 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2008:0103, RHSA-2008:0104, RHSA-2008:0105 |
| Red Hat Linux Advanced Workstation 2.1 | Fixed | RHSA-2008:0104 |
Timeline
- 2026-10-02 Threatist record created from CVE-2008-0412
- 2026-10-03 Alias added: GHSA-cj4c-5gff-3x9p
References
Advisory 22
Other 14
- http://browser.netscape.com/releasenotes/
- https://issues.rpath.com/browse/RPL-1995
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093
- ADV-2008-0453
- http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html
- ADV-2008-0454
- ADV-2008-1793
- http://www.mozilla.org/security/announce/2008/mfsa2008-01.html
- http://wiki.rpath.com/Advisories:rPSA-2008-0093
- ADV-2008-2091
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088%2C393141%2C364801%2C346405%2C396613%2C394337%2C406290
- http://wiki.rpath.com/Advisories:rPSA-2008-0051
- ADV-2008-0627
- oval:org.mitre.oval:def:10573
More Mozilla Firefox vulnerabilities
- TI-2024-08981 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.8
- TI-2022-09832 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.6
- TI-2019-08769 Improper input validation in Mozilla Firefox ESR KEVCVSS 3.1CRITICAL 10.0
- TI-2010-03577 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… KEVCVSS 3.1CRITICAL 9.8
- TI-2023-04799 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
- TI-2023-04477 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2008-0412 · CVE Program
- CVE-2008-0412 · NVD
- FIRST EPSS
- GHSA-cj4c-5gff-3x9p · GitHub Advisory Database · CC BY 4.0
- CVE-2008-0412 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences