CVE-2008-5502
No CVSS score yet. EPSS 2.3% chance of exploitation in the next 30 days.
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-11-01)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- mozilla:firefox
- mozilla:seamonkey