Upstream information

CVE-2008-4061 at MITRE

Description

Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via an mtd element with a large integer value in the rowspan attribute, related to the layout engine.

SUSE information

Overall state of this security issue: Ignore

This issue is currently rated as having critical severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 10
Vector AV:N/AC:L/Au:N/C:C/I:C/A:C
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
SUSE Bugzilla entry: 429179 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 11.0
  • MozillaThunderbird-debuginfo >= 2.0.0.17-0.1
  • MozillaThunderbird-debugsource >= 2.0.0.17-0.1
openSUSE 11.0
  • MozillaThunderbird >= 2.0.0.17-0.1
  • MozillaThunderbird-devel >= 2.0.0.17-0.1
  • MozillaThunderbird-translations >= 2.0.0.17-0.1
openSUSE 11.0
  • seamonkey-debuginfo >= 1.1.12-0.1
  • seamonkey-debugsource >= 1.1.12-0.1
openSUSE 11.0
  • seamonkey >= 1.1.12-0.1
  • seamonkey-dom-inspector >= 1.1.12-0.1
  • seamonkey-irc >= 1.1.12-0.1
  • seamonkey-mail >= 1.1.12-0.1
  • seamonkey-spellchecker >= 1.1.12-0.1
  • seamonkey-venkman >= 1.1.12-0.1
SUSE Linux Enterprise SDK 10 SP2
  • gecko-sdk >= 1.8.0.14eol-0.7
Builds
ZYPP Patch Nr: 5654
openSUSE 11.0
  • MozillaFirefox-debuginfo >= 3.0.3-1.1
  • MozillaFirefox-debugsource >= 3.0.3-1.1
openSUSE 11.0
  • MozillaFirefox >= 3.0.3-1.1
  • MozillaFirefox-translations >= 3.0.3-1.1
openSUSE 11.0
  • mozilla-xulrunner181-debuginfo >= 1.8.1.13-22.1
  • mozilla-xulrunner181-debugsource >= 1.8.1.13-22.1
openSUSE 11.0
  • mozilla-xulrunner181 >= 1.8.1.13-22.1
  • mozilla-xulrunner181-32bit >= 1.8.1.13-22.1
  • mozilla-xulrunner181-64bit >= 1.8.1.13-22.1
  • mozilla-xulrunner181-devel >= 1.8.1.13-22.1
  • mozilla-xulrunner181-l10n >= 1.8.1.13-22.1
Novell Linux Desktop 9 for x86
  • epiphany >= 1.2.10-0.7
  • epiphany-doc >= 1.2.10-0.7
  • epiphany-extensions >= 0.8.2-2.8
  • epiphany-extensions-devel >= 0.8.2-2.8
  • mozilla >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-cs >= 1.8_seamonkey_1.0.4-0.11
  • mozilla-deat >= 1.8_seamonkey_1.0.4-0.11
  • mozilla-devel >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-dom-inspector >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-hu >= 1.80_seamonkey_1.0.4-9
  • mozilla-irc >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-mail >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-venkman >= 1.8_seamonkey_1.0.9-1.15
Builds
YOU Patch Nr: 12264
Novell Linux Desktop 9 for x86_64
  • epiphany >= 1.2.10-0.7
  • epiphany-doc >= 1.2.10-0.7
  • epiphany-extensions >= 0.8.2-2.8
  • epiphany-extensions-devel >= 0.8.2-2.8
  • mozilla >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-cs >= 1.8_seamonkey_1.0.4-0.11
  • mozilla-deat >= 1.8_seamonkey_1.0.4-0.11
  • mozilla-devel >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-dom-inspector >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-hu >= 1.80_seamonkey_1.0.4-9
  • mozilla-irc >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-lib64 >= 1.8_seamonkey_1.0.9-0.6
  • mozilla-mail >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-venkman >= 1.8_seamonkey_1.0.9-1.15
Builds
YOU Patch Nr: 12264
Open Enterprise Server
  • mozilla >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-calendar >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-cs >= 1.8_seamonkey_1.0.4-0.11
  • mozilla-deat >= 1.8_seamonkey_1.0.4-0.11
  • mozilla-devel >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-dom-inspector >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-hu >= 1.80_seamonkey_1.0.4-9
  • mozilla-irc >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-mail >= 1.8_seamonkey_1.0.9-1.15
  • mozilla-venkman >= 1.8_seamonkey_1.0.9-1.15
Builds
YOU Patch Nr: 12264
Novell Linux Desktop 9 for x86
Novell Linux Desktop 9 for x86_64
  • MozillaFirefox >= 1.5.0.12-0.13
  • MozillaFirefox-translations >= 1.5.0.12-0.13
Builds
YOU Patch Nr: 12263
openSUSE 11.0
  • mozilla-xulrunner190-debuginfo >= 1.9.0.3-1.1
  • mozilla-xulrunner190-debugsource >= 1.9.0.3-1.1
openSUSE 11.0
  • mozilla-xulrunner190 >= 1.9.0.3-1.1
  • mozilla-xulrunner190-32bit >= 1.9.0.3-1.1
  • mozilla-xulrunner190-64bit >= 1.9.0.3-1.1
  • mozilla-xulrunner190-devel >= 1.9.0.3-1.1
  • mozilla-xulrunner190-gnomevfs >= 1.9.0.3-1.1
  • mozilla-xulrunner190-gnomevfs-32bit >= 1.9.0.3-1.1
  • mozilla-xulrunner190-gnomevfs-64bit >= 1.9.0.3-1.1
  • mozilla-xulrunner190-translations >= 1.9.0.3-1.1
  • mozilla-xulrunner190-translations-32bit >= 1.9.0.3-1.1
  • mozilla-xulrunner190-translations-64bit >= 1.9.0.3-1.1