Detections
Analytics
CVE-2008-5508
high
Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.
References
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11040
https://exchange.xforce.ibmcloud.com/vulnerabilities/47414
https://bugzilla.mozilla.org/show_bug.cgi?id=460803
https://bugzilla.mozilla.org/show_bug.cgi?id=425046
http://www.vupen.com/english/advisories/2009/0977
http://www.ubuntu.com/usn/usn-701-2
http://www.ubuntu.com/usn/usn-701-1
http://www.ubuntu.com/usn/usn-690-2
http://www.securitytracker.com/id?1021426
http://www.securityfocus.com/bid/32882
http://www.redhat.com/support/errata/RHSA-2009-0002.html
http://www.redhat.com/support/errata/RHSA-2008-1037.html
http://www.redhat.com/support/errata/RHSA-2008-1036.html
http://www.mozilla.org/security/announce/2008/mfsa2008-66.html
http://www.mandriva.com/security/advisories?name=MDVSA-2009:012
http://www.mandriva.com/security/advisories?name=MDVSA-2008:245
http://www.mandriva.com/security/advisories?name=MDVSA-2008:244
http://www.debian.org/security/2009/dsa-1707
http://www.debian.org/security/2009/dsa-1704
http://www.debian.org/security/2009/dsa-1697
http://www.debian.org/security/2009/dsa-1696
http://secunia.com/advisories/35080
http://secunia.com/advisories/34501
http://secunia.com/advisories/33547
http://secunia.com/advisories/33523
http://secunia.com/advisories/33434
http://secunia.com/advisories/33433
http://secunia.com/advisories/33421
http://secunia.com/advisories/33415
http://secunia.com/advisories/33408
http://secunia.com/advisories/33231
http://secunia.com/advisories/33216
http://secunia.com/advisories/33205
http://secunia.com/advisories/33204
http://secunia.com/advisories/33203
http://secunia.com/advisories/33189