NetSight
IP …
medium5.0

CVE-2008-4069

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensit…

Impact

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file.

Affected products

VendorProductAffected versions
MozillaFirefox
through 2.0.0.16
Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3
MozillaSeamonkey
All versions
through 1.1.11
Versions 1.0, 1.0.1, 1.0.2, 1.0.3

Weakness classification

CWE-200

References