CVE-2008-5014

State: Published
Severity: Not scored
Published: Nov 13, 2008
Updated: Aug 7, 2024
Reserved: Nov 10, 2008

Description

jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

32011third-party-advisory
ADV-2008-3146vdb-entry
DSA-1697vendor-advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=436741
DSA-1671vendor-advisory
32281vdb-entry
FEDORA-2008-9667vendor-advisory
RHSA-2008:0977vendor-advisory
MDVSA-2008:230vendor-advisory
ADV-2009-0977vdb-entry
32695third-party-advisory
1021182vdb-entry
RHSA-2008:0978vendor-advisory
DSA-1669vendor-advisory
32778third-party-advisory
RHSA-2008:0976vendor-advisory
FEDORA-2008-9669vendor-advisory
33433third-party-advisory
http://www.mozilla.org/security/announce/2008/mfsa2008-50.html
256408vendor-advisory
SUSE-SA:2008:055vendor-advisory
32694third-party-advisory
32721third-party-advisory
TA08-319Athird-party-advisory
32853third-party-advisory
DSA-1696vendor-advisory
oval:org.mitre.oval:def:9157vdb-entrysignature
32715third-party-advisory
32693third-party-advisory
MDVSA-2008:228vendor-advisory
32845third-party-advisory
MDVSA-2008:235vendor-advisory
33434third-party-advisory
32798third-party-advisory
32684third-party-advisory
USN-667-1vendor-advisory
32714third-party-advisory
34501third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.