VULNERABILITY INTELLIGENCE
CVE-2008-5715
CVSS score5 MEDIUM
EPSS probability8.50%
CISA KEVNot currently listed
Published2008-12-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property (aka location.hash). NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU consumption and application hang in unspecified circumstances perhaps involving other platforms.
Weakness classification
- CWE-20: Improper Input Validation