Vulnerability · NVD
CVE-2008-2785
N/A
Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.
EPSS
5.28%
above median
percentile 91.8%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
Vulnerable CPE configurations (33)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | ≤2.0.0.14 | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:* |