CVE-2008-4324

no score yetEPSS 8.9%

mozilla firefox: no CVSS score yet. EPSS 8.9% chance of exploitation in the next 30 days.

The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events. NOTE: it was later reported that Firefox 3.0.2 on Mac OS X 10.5 is also affected.

EPSS: 8.9% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2008-09-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

http://evilfingers.com/advisory/Firefox_User_Interface_Null_Pointer_Dereference_Dispatcher_Crash_n_Remote_DoS.php
http://secunia.com/advisories/32040
http://securityreason.com/securityalert/4321
http://www.secniche.org/moz303.html
http://www.secniche.org/moz303/index.html

Check your stack JSON