← Database

CVE-2008-5021

CRITICAL CVSS: 9.3 Published: 2008-11-13 Modified: 2026-06-16

Description

nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.

Affected Platforms

Canonical Ubuntu LinuxSuse Linux Enterprise Software Development KitMozilla FirefoxFedoraproject FedoraMozilla SeamonkeyDebian Debian LinuxSuse Linux Enterprise DebuginfoNovell Open Enterprise ServerSuse Linux Enterprise DesktopMozilla Thunderbird

Weakness Type

CWE-362

References