VULNERABILITY INTELLIGENCE

CVE-2008-5502

CVSS score5 MEDIUM
EPSS probability2.27%
CISA KEVNot currently listed
Published2008-12-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.

Primary references