CVE-2008-4069

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file.

🔗 References (70)

• secalert@redhathttp://download.novell.com/Download?buildid=WZXONb-tqBw~
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html
• secalert@redhathttp://secunia.com/advisories/31984
• secalert@redhathttp://secunia.com/advisories/31985
• secalert@redhathttp://secunia.com/advisories/32010
• secalert@redhathttp://secunia.com/advisories/32012
• secalert@redhathttp://secunia.com/advisories/32042
• secalert@redhathttp://secunia.com/advisories/32044
• secalert@redhathttp://secunia.com/advisories/32144
• secalert@redhathttp://secunia.com/advisories/32185
• secalert@redhathttp://secunia.com/advisories/32196
• secalert@redhathttp://secunia.com/advisories/32845
• secalert@redhathttp://secunia.com/advisories/33433
• secalert@redhathttp://secunia.com/advisories/34501
• secalert@redhathttp://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422