What’s Vulnerable › Vulnerabilities

CVE-2008-4063

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-09-24 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.

Affected products

• Canonical Ubuntu Linux: 6.06, 7.04, 7.10, 8.04
• Mozilla Firefox: through 3.0.1; 3.0

References

• http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html
• http://secunia.com/advisories/31987
• http://secunia.com/advisories/32011
• http://secunia.com/advisories/32012
• http://secunia.com/advisories/32025
• http://secunia.com/advisories/32044
• http://secunia.com/advisories/32082
• http://secunia.com/advisories/32089
• http://secunia.com/advisories/32095
• http://secunia.com/advisories/32096
• http://secunia.com/advisories/32196
• http://secunia.com/advisories/34501

Get alerted when CVE-2008-4063 or the next vulnerability affects your stack