CVE-2008-5052

The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.

• CWE-399

• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.htmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:228Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:235Third Party Advisory
• http://www.mozilla.org/security/announce/2008/mfsa2008-52.htmlVendor Advisory
• http://www.securityfocus.com/bid/32281Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021183Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA08-319A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2008/3146Third Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=454113Issue Tracking, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.htmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:228Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:235Third Party Advisory
• http://www.mozilla.org/security/announce/2008/mfsa2008-52.htmlVendor Advisory
• http://www.securityfocus.com/bid/32281Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021183Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA08-319A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2008/3146Third Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=454113Issue Tracking, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449Third Party Advisory

Published

Nov 13, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5046SQL injection vulnerability in index.php in Mole Group Pizza…
• CVE-2008-5047SQL injection vulnerability in admin/index.php in Mole Group…
• CVE-2008-5048Buffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite…
• CVE-2008-5049Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-K…
• CVE-2008-5050Off-by-one error in the get_unicode_name function (libclamav…
• CVE-2008-5051SQL injection vulnerability in the JooBlog (com_jb2) compone…
• CVE-2008-5053PHP remote file inclusion vulnerability in admin.rssreader.p…
• CVE-2008-5054Multiple SQL injection vulnerabilities in Develop It Easy Me…
• CVE-2008-5055SQL injection vulnerability in department_offline_context.ph…
• CVE-2008-5056Cross-site scripting (XSS) vulnerability in department_offli…
• CVE-2008-5057SQL injection vulnerability in film.asp in Yigit Aybuga Dizi…
• CVE-2008-5058SQL injection vulnerability in siteadmin/loginsucess.php in …