National Cyber Awareness System

Vulnerability Summary for CVE-2008-0420

Overview

modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2008-2118

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html

External Source: FEDORA

Name: FEDORA-2008-2060

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html

External Source: CONFIRM

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=408076

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=408076

External Source: XF

Name: firefox-bmp-dos(40606)

Hyperlink:http://xforce.iss.net/xforce/xfdb/40606

External Source: XF

Name: firefox-bmp-information-disclosure(40491)

Hyperlink:http://xforce.iss.net/xforce/xfdb/40491

External Source: VUPEN

Name: ADV-2008-1793

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2008/1793/references

External Source: VUPEN

Name: ADV-2008-0627

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2008/0627/references

External Source: UBUNTU

Name: USN-576-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-576-1

External Source: UBUNTU

Name: USN-582-2

Hyperlink:http://www.ubuntu.com/usn/usn-582-2

External Source: UBUNTU

Name: USN-582-1

Hyperlink:http://www.ubuntu.com/usn/usn-582-1

External Source: BID

Name: 27826

Hyperlink:http://www.securityfocus.com/bid/27826

External Source: BUGTRAQ

Name: 20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/488264/100/0/threaded

External Source: CONFIRM

Name: http://www.mozilla.org/security/announce/2008/mfsa2008-07.html

Hyperlink:http://www.mozilla.org/security/announce/2008/mfsa2008-07.html

External Source: MANDRIVA

Name: MDVSA-2008:048

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:048

External Source: GENTOO

Name: GLSA-200805-18

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml

External Source: SUNALERT

Name: 238492

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1

External Source: SECTRACK

Name: 1019434

Hyperlink:http://securitytracker.com/id?1019434

External Source: SECUNIA

Name: 30620

Type: Advisory

Hyperlink:http://secunia.com/advisories/30620

External Source: SECUNIA

Name: 30327

Type: Advisory

Hyperlink:http://secunia.com/advisories/30327

External Source: SECUNIA

Name: 29167

Type: Advisory

Hyperlink:http://secunia.com/advisories/29167

External Source: SECUNIA

Name: 29098

Type: Advisory

Hyperlink:http://secunia.com/advisories/29098

External Source: SECUNIA

Name: 29049

Type: Advisory

Hyperlink:http://secunia.com/advisories/29049

External Source: SECUNIA

Name: 28839

Type: Advisory

Hyperlink:http://secunia.com/advisories/28839

External Source: SECUNIA

Name: 28758

Type: Advisory

Hyperlink:http://secunia.com/advisories/28758

External Source: OVAL

Name: oval:org.mitre.oval:def:10119

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10119

External Source: CONFIRM

Name: http://browser.netscape.com/releasenotes/

Hyperlink:http://browser.netscape.com/releasenotes/

References to Check Content

Identifier:oval:org.mitre.oval:def:10119

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10119