CVE-2008-2807

Priority
Description
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly
handle an invalid .properties file for an add-on, which allows remote
attackers to read uninitialized memory, as demonstrated by use of ISO 8859
encoding instead of UTF-8 encoding in a French .properties file.
Assigned-to
asac
Notes
Package
Upstream:released (2.0.0.15)
Package
Upstream:needs-triage
Package
Upstream:needs-triage
Package
Upstream:released (2.0.0.15)
Package
Upstream:released (2.0.0.15)
Package
Upstream:needs-triage
Package
Upstream:released (1.1.10)
Package
Upstream:released (2.0.0.16)
Package
Upstream:needs-triage
More Information

Updated: 2019-12-05 20:49:32 UTC (commit 0aa5e7c87c8b55d2ec5c7f4ca1179cf75de91961)