CVE-2008-5508
Fixed in a distro release EPSS 2%
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | iceape | 1.0.13~pre080614i-0etch1 |
| Debian 4.0 | icedove | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1 |
| Debian 4.0 | iceweasel | 2.0.0.19-0etch1 |
| Debian 4.0 | xulrunner | 1.8.0.15~pre080614i-0etch1 |
| Red Hat Enterprise Linux 2.1 | seamonkey | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-chat | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-devel | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-dom-inspector | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-js-debugger | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-mail | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr-devel | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss-devel | 0:1.0.9-0.25.el2 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.9-0.29.el3 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.0.5-1.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.0.5-1.el4 |
| Red Hat Enterprise Linux 4 | nspr | 0:4.7.3-1.el4 |
| Red Hat Enterprise Linux 4 | nspr-debuginfo | 0:4.7.3-1.el4 |
| Red Hat Enterprise Linux 4 | nspr-devel | 0:4.7.3-1.el4 |
| Red Hat Enterprise Linux 4 | nss | 0:3.12.2.0-1.el4 |
| Red Hat Enterprise Linux 4 | nss-debuginfo | 0:3.12.2.0-1.el4 |
| Red Hat Enterprise Linux 4 | nss-devel | 0:3.12.2.0-1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.9-32.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.9-32.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.9-32.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.9-32.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.9-32.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.9-32.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.9-32.el4 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.12-18.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.12-18.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | nspr | 0:4.7.3-2.el5 |
| Red Hat Enterprise Linux 5 | nspr-debuginfo | 0:4.7.3-2.el5 |
| Red Hat Enterprise Linux 5 | nspr-devel | 0:4.7.3-2.el5 |
| Red Hat Enterprise Linux 5 | nss | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | nss-debuginfo | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | nss-devel | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | nss-pkcs11-devel | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | nss-tools | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:2.0.0.19-1.el5_2 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:2.0.0.19-1.el5_2 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | xulrunner-devel-unstable | 0:1.9.0.5-1.el5_2 |
| Red Hat rhel productivity 5 | thunderbird | 0:2.0.0.19-1.el5_2 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:2.0.0.19-1.el5_2 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |