CVE-2008-5510
Fixed in a distro release EPSS 2%
The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | iceweasel | 2.0.0.19-0etch1 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.0.5-1.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.0.5-1.el4 |
| Red Hat Enterprise Linux 4 | nspr | 0:4.7.3-1.el4 |
| Red Hat Enterprise Linux 4 | nspr-debuginfo | 0:4.7.3-1.el4 |
| Red Hat Enterprise Linux 4 | nspr-devel | 0:4.7.3-1.el4 |
| Red Hat Enterprise Linux 4 | nss | 0:3.12.2.0-1.el4 |
| Red Hat Enterprise Linux 4 | nss-debuginfo | 0:3.12.2.0-1.el4 |
| Red Hat Enterprise Linux 4 | nss-devel | 0:3.12.2.0-1.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | nspr | 0:4.7.3-2.el5 |
| Red Hat Enterprise Linux 5 | nspr-debuginfo | 0:4.7.3-2.el5 |
| Red Hat Enterprise Linux 5 | nspr-devel | 0:4.7.3-2.el5 |
| Red Hat Enterprise Linux 5 | nss | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | nss-debuginfo | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | nss-devel | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | nss-pkcs11-devel | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | nss-tools | 0:3.12.2.0-2.el5 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.0.5-1.el5_2 |
| Red Hat Enterprise Linux 5 | xulrunner-devel-unstable | 0:1.9.0.5-1.el5_2 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |