Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2008-5052

CVE-2008-5052, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
-
Exploitation
3.4 %

EPSS, predicted over 30 days

Tracked apps
2
Still exposed
0

The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.

EPSS 3.45% above median percentile 88.5%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Mozilla Firefox Windows winget:Mozilla.Firefox
    Affected ≥2.0 <2.0.0.18 Fixed in 2.0.0.18 Latest tracked 156.0.1 patched
  • Mozilla Thunderbird Windows winget:Mozilla.Thunderbird
    Affected ≥2.0 <2.0.0.18 Fixed in 2.0.0.18 Latest tracked 156.0.1 patched
Vulnerable CPE configurations (2)
Vendor Product Versions
mozilla firefox
All platforms (wildcard)
 ≥2.0 <2.0.0.18
mozilla thunderbird
All platforms (wildcard)
 ≥2.0 <2.0.0.18
View on NVD ↗ Advisory · www.mozilla.org Advisory · bugzilla.mozilla.org

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM