CVE-2008-2811: mozilla firefox Resource Management Errors

CVSS: 10.0v2.0HighModified

Published 07-07-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-2811 is a high (CVSS 10.0) Resource Management Errors vulnerability in mozilla firefox. EPSS estimates a 7.08% chance of exploitation in the next 30 days, higher than 94.1% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

7.08%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8

DSA-1607-1 DSA-1615-1 DSA-1621-1 DSA-1697-1 RHSA-2008:0547 RHSA-2008:0549+2 more

Timeline

07-07-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image whose display requires more pixels than nscoord_MAX, related to nsBlockFrame::DrainOverflowLines.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

7.08%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.08% on 19-09-2026

19-09-202619-10-2026

EPSS score

7.08%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.

Affected systems

Mozilla3 products

firefox≤ 2.0.0.14 | 2.0 | 2.0.0.1 | 2.0.0.2 | 2.0.0.3 | 2.0.0.4 | 2.0.0.5 | 2.0.0.6 | 2.0.0.7 | 2.0.0.8 | 2.0.0.9 | 2.0.0.10 | 2.0.0.11 | 2.0.0.12 | 2.0.0.13
seamonkey≤ 1.1.9 | 1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5 | 1.1.6 | 1.1.7 | 1.1.8
thunderbird≤ 2.0.0.14 | 2.0.0.0 | 2.0.0.1 | 2.0.0.2 | 2.0.0.3 | 2.0.0.4 | 2.0.0.5 | 2.0.0.6 | 2.0.0.8 | 2.0.0.9 | 2.0.0.11 | 2.0.0.12 | 2.0.0.13

1 vendor · 3 products

References

56 links

bugzilla.mozilla.org/show_bug.cgi?id=439735X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/support/errata/RHSA-2008-0549.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2009/dsa-1697Vendor AdvisoryX Refsource DEBIAN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9865VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/31021Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30898Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31403Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/Advisories:rPSA-2008-0216X Refsource CONFIRM
issues.rpath.com/browse/RPL-2646X Refsource CONFIRM

Show all 56 references

secunia.com/advisories/30949Third Party AdvisoryX Refsource SECUNIA
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152Vendor AdvisoryX Refsource SLACKWARE
www.vupen.com/english/advisories/2009/0977VDB EntryX Refsource VUPEN
secunia.com/advisories/31069Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31008Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31377Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2008-0616.htmlVendor AdvisoryX Refsource REDHAT
www.mozilla.org/security/announce/2008/mfsa2008-33.htmlX Refsource CONFIRM
www.vupen.com/english/advisories/2008/1993/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/31023Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:155Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/30038VDB EntryX Refsource BID
secunia.com/advisories/30915Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1607Vendor AdvisoryX Refsource DEBIAN
security.gentoo.org/glsa/glsa-200808-03.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/31005Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33433Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.htmlVendor AdvisoryX Refsource FEDORA
www.securitytracker.com/id?1020419VDB EntryX Refsource SECTRACK
secunia.com/advisories/31253Third Party AdvisoryX Refsource SECUNIA
www.mozilla.org/projects/security/known-vulnerabilities.htmlX Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/31183Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30903Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0547.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.htmlVendor AdvisoryX Refsource FEDORA
www.ubuntu.com/usn/usn-629-1Vendor AdvisoryX Refsource UBUNTU
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Vendor AdvisoryX Refsource SUNALERT
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911Vendor AdvisoryX Refsource SLACKWARE
www.kb.cert.org/vuls/id/607267Third Party AdvisoryX Refsource CERT VNUS Government Resource
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484Vendor AdvisoryX Refsource SLACKWARE
www.debian.org/security/2008/dsa-1615Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/31220Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31195Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31076Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-619-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/30911Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2008-0569.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/30878Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1621Vendor AdvisoryX Refsource DEBIAN
www.securityfocus.com/archive/1/494080/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/31286Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/34501Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:136Vendor AdvisoryX Refsource MANDRIVA

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities