← Database

CVE-2008-5508

MEDIUM CVSS: 4.3 Published: 2008-12-17 Modified: 2026-06-16

Description

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

Affected Platforms

Canonical Ubuntu LinuxMozilla FirefoxMozilla SeamonkeyDebian Debian LinuxMozilla Thunderbird

Weakness Type

CWE-20

References