CVE-2008-5052: mozilla firefox Resource Management Errors
Vulnerability summary
CVE-2008-5052 is a high (CVSS 10.0) Resource Management Errors vulnerability in mozilla firefox. EPSS estimates a 3.45% chance of exploitation in the next 30 days, higher than 88.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 7Timeline
- 13-11-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.45%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.45% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mozilla3 products
- firefox≥ 2.0, < 2.0.0.18
- seamonkey≥ 1.0, ≤ 1.1.13
- thunderbird≥ 2.0, < 2.0.0.18
1 vendor · 3 products
References
10 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449VDB EntrySignatureX Refsource OVALThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- www.us-cert.gov/cas/techalerts/TA08-319A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- www.mandriva.com/security/advisories?name=MDVSA-2008:228Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2008:235Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory