CyberSec.Space Logo
Back to CVE Browser

CVE-2008-0016

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1760%
EPSS Percentile9.55th
PublishedSep 24, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

Affected Platforms (CPE)

📦
Mozilla

Firefox

<= 2.0.0.16
📦
Mozilla

Firefox

= 0.8
📦
Mozilla

Firefox

= 0.9
📦
Mozilla

Firefox

= 0.9
📦
Mozilla

Firefox

= 0.9.1
📦
Mozilla

Firefox

= 0.9.2
📦
Mozilla

Firefox

= 0.9.3
📦
Mozilla

Firefox

= 0.9_rc
📦
Mozilla

Firefox

= 0.10
📦
Mozilla

Firefox

= 0.10.1
📦
Mozilla

Firefox

= 1.0
📦
Mozilla

Firefox

= 1.0.1
📦
Mozilla

Firefox

= 1.0.2
📦
Mozilla

Firefox

= 1.0.3
📦
Mozilla

Firefox

= 1.0.4
📦
Mozilla

Firefox

= 1.0.5
📦
Mozilla

Firefox

= 1.0.6
📦
Mozilla

Firefox

= 1.0.7
📦
Mozilla

Firefox

= 1.0.8
📦
Mozilla

Firefox

= 1.5
📦
Mozilla

Firefox

= 1.5
📦
Mozilla

Firefox

= 1.5
📦
Mozilla

Firefox

= 1.5.0.1
📦
Mozilla

Firefox

= 1.5.0.2
📦
Mozilla

Firefox

= 1.5.0.3
📦
Mozilla

Firefox

= 1.5.0.4
📦
Mozilla

Firefox

= 1.5.0.5
📦
Mozilla

Firefox

= 1.5.0.6
📦
Mozilla

Firefox

= 1.5.0.7
📦
Mozilla

Firefox

= 1.5.0.8
📦
Mozilla

Firefox

= 1.5.0.9
📦
Mozilla

Firefox

= 1.5.0.10
📦
Mozilla

Firefox

= 1.5.0.11
📦
Mozilla

Firefox

= 1.5.0.12
📦
Mozilla

Firefox

= 1.5.1
📦
Mozilla

Firefox

= 1.5.2
📦
Mozilla

Firefox

= 1.5.3
📦
Mozilla

Firefox

= 1.5.4
📦
Mozilla

Firefox

= 1.5.5
📦
Mozilla

Firefox

= 1.5.6
📦
Mozilla

Firefox

= 1.5.7
📦
Mozilla

Firefox

= 1.5.8
📦
Mozilla

Firefox

= 1.8
📦
Mozilla

Firefox

= 2.0
📦
Mozilla

Firefox

= 2.0.0.1
📦
Mozilla

Firefox

= 2.0.0.10
📦
Mozilla

Firefox

= 2.0.0.11
📦
Mozilla

Firefox

= 2.0.0.12
📦
Mozilla

Firefox

= 2.0.0.13
📦
Mozilla

Firefox

= 2.0.0.14
📦
Mozilla

Firefox

= 2.0.0.15
📦
Mozilla

Seamonkey

All versions
📦
Mozilla

Seamonkey

<= 1.1.11
📦
Mozilla

Seamonkey

= 1.0
📦
Mozilla

Seamonkey

= 1.0
📦
Mozilla

Seamonkey

= 1.0
📦
Mozilla

Seamonkey

= 1.0
📦
Mozilla

Seamonkey

= 1.0.1
📦
Mozilla

Seamonkey

= 1.0.2
📦
Mozilla

Seamonkey

= 1.0.3
📦
Mozilla

Seamonkey

= 1.0.4
📦
Mozilla

Seamonkey

= 1.0.5
📦
Mozilla

Seamonkey

= 1.0.6
📦
Mozilla

Seamonkey

= 1.0.7
📦
Mozilla

Seamonkey

= 1.0.8
📦
Mozilla

Seamonkey

= 1.0.9
📦
Mozilla

Seamonkey

= 1.0.99
📦
Mozilla

Seamonkey

= 1.1
📦
Mozilla

Seamonkey

= 1.1.1
📦
Mozilla

Seamonkey

= 1.1.10

References & Advisories

🔗 http://download.novell.com/Download?buildid=WZXONb-tqBw~
🔗 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html
🔗 http://secunia.com/advisories/31984
🔗 http://secunia.com/advisories/31985
🔗 http://secunia.com/advisories/32010
🔗 http://secunia.com/advisories/32012
🔗 http://secunia.com/advisories/32042
🔗 http://secunia.com/advisories/32044

Related Vulnerabilities

CVE-2019-1170810.0

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the no...

CVE-2019-2513610.0

A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and ...

CVE-2018-1850510.0

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication betwee...

CVE-2020-1238810.0

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this iss...