CVE-2008-5508

Description (CNA)

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.securityfocus.com/bid/32882
• http://secunia.com/advisories/33408
• http://www.debian.org/security/2009/dsa-1697
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47414
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11040
• http://www.securitytracker.com/id?1021426
• http://secunia.com/advisories/33205
• http://secunia.com/advisories/33421
• http://www.redhat.com/support/errata/RHSA-2008-1036.html
• http://www.vupen.com/english/advisories/2009/0977
• http://www.ubuntu.com/usn/usn-690-2
• http://www.mozilla.org/security/announce/2008/mfsa2008-66.html
• http://www.ubuntu.com/usn/usn-701-1
• http://secunia.com/advisories/33231
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:245
• https://usn.ubuntu.com/690-1/
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:012
• http://secunia.com/advisories/33203
• http://secunia.com/advisories/33433
• http://www.debian.org/security/2009/dsa-1707
• https://bugzilla.mozilla.org/show_bug.cgi?id=425046
• http://secunia.com/advisories/33216
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
• http://www.redhat.com/support/errata/RHSA-2008-1037.html
• http://www.debian.org/security/2009/dsa-1704
• http://www.debian.org/security/2009/dsa-1696
• http://secunia.com/advisories/33204
• http://www.ubuntu.com/usn/usn-701-2
• http://secunia.com/advisories/33184
• http://www.redhat.com/support/errata/RHSA-2009-0002.html
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:244
• https://bugzilla.mozilla.org/show_bug.cgi?id=460803
• http://secunia.com/advisories/33415
• http://secunia.com/advisories/33188
• http://secunia.com/advisories/33523
• http://secunia.com/advisories/35080
• http://secunia.com/advisories/33547
• http://secunia.com/advisories/33434
• http://secunia.com/advisories/33189
• http://secunia.com/advisories/34501

ADP enrichment