Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-474s-ddrw-4fgr
Summary
Multiple vulnerabilities have been reported in Mozilla Firefox,
    Thunderbird, SeaMonkey and XULRunner, some of which may allow user-assisted
    execution of arbitrary code.
Aliases
0
alias CVE-2008-1238
Fixed_packages
0
url pkg:ebuild/mail-client/mozilla-thunderbird@2.0.0.14
purl pkg:ebuild/mail-client/mozilla-thunderbird@2.0.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/mozilla-thunderbird@2.0.0.14
1
url pkg:ebuild/mail-client/mozilla-thunderbird-bin@2.0.0.14
purl pkg:ebuild/mail-client/mozilla-thunderbird-bin@2.0.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/mozilla-thunderbird-bin@2.0.0.14
2
url pkg:ebuild/net-libs/xulrunner@1.1.9
purl pkg:ebuild/net-libs/xulrunner@1.1.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.1.9
3
url pkg:ebuild/net-libs/xulrunner@1.1.9-r1
purl pkg:ebuild/net-libs/xulrunner@1.1.9-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.1.9-r1
4
url pkg:ebuild/net-libs/xulrunner@1.8.1.14
purl pkg:ebuild/net-libs/xulrunner@1.8.1.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.8.1.14
5
url pkg:ebuild/net-libs/xulrunner@2.0.0.14
purl pkg:ebuild/net-libs/xulrunner@2.0.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@2.0.0.14
6
url pkg:ebuild/www-client/mozilla-firefox@2.0.0.14
purl pkg:ebuild/www-client/mozilla-firefox@2.0.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/mozilla-firefox@2.0.0.14
7
url pkg:ebuild/www-client/mozilla-firefox-bin@2.0.0.14
purl pkg:ebuild/www-client/mozilla-firefox-bin@2.0.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/mozilla-firefox-bin@2.0.0.14
8
url pkg:ebuild/www-client/seamonkey@1.1.9-r1
purl pkg:ebuild/www-client/seamonkey@1.1.9-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@1.1.9-r1
9
url pkg:ebuild/www-client/seamonkey@2.0.0.14
purl pkg:ebuild/www-client/seamonkey@2.0.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@2.0.0.14
10
url pkg:ebuild/www-client/seamonkey-bin@1.1.9
purl pkg:ebuild/www-client/seamonkey-bin@1.1.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@1.1.9
11
url pkg:ebuild/www-client/seamonkey-bin@1.1.9-r1
purl pkg:ebuild/www-client/seamonkey-bin@1.1.9-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@1.1.9-r1
12
url pkg:ebuild/www-client/seamonkey-bin@2.0.0.14
purl pkg:ebuild/www-client/seamonkey-bin@2.0.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@2.0.0.14
13
url pkg:mozilla/SeaMonkey@1.1.9
purl pkg:mozilla/SeaMonkey@1.1.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@1.1.9
Affected_packages
0
url pkg:rpm/redhat/firefox@1.5.0.12-0.14?arch=el4
purl pkg:rpm/redhat/firefox@1.5.0.12-0.14?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44pm-j3ma-9qgx
1
vulnerability VCID-474s-ddrw-4fgr
2
vulnerability VCID-74k3-cpxf-f3ag
3
vulnerability VCID-gy61-bm88-u3e7
4
vulnerability VCID-jktq-6e2e-2ya7
5
vulnerability VCID-m1wx-33dp-myds
6
vulnerability VCID-snrh-b3y9-gybx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@1.5.0.12-0.14%3Farch=el4
1
url pkg:rpm/redhat/firefox@1.5.0.12-14?arch=el5_1
purl pkg:rpm/redhat/firefox@1.5.0.12-14?arch=el5_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44pm-j3ma-9qgx
1
vulnerability VCID-474s-ddrw-4fgr
2
vulnerability VCID-74k3-cpxf-f3ag
3
vulnerability VCID-gy61-bm88-u3e7
4
vulnerability VCID-jktq-6e2e-2ya7
5
vulnerability VCID-m1wx-33dp-myds
6
vulnerability VCID-snrh-b3y9-gybx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@1.5.0.12-14%3Farch=el5_1
2
url pkg:rpm/redhat/seamonkey@1.0.9-0.14?arch=el2
purl pkg:rpm/redhat/seamonkey@1.0.9-0.14?arch=el2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44pm-j3ma-9qgx
1
vulnerability VCID-474s-ddrw-4fgr
2
vulnerability VCID-74k3-cpxf-f3ag
3
vulnerability VCID-8h4q-2ubw-vudu
4
vulnerability VCID-gy61-bm88-u3e7
5
vulnerability VCID-jktq-6e2e-2ya7
6
vulnerability VCID-m1wx-33dp-myds
7
vulnerability VCID-snrh-b3y9-gybx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/seamonkey@1.0.9-0.14%3Farch=el2
3
url pkg:rpm/redhat/seamonkey@1.0.9-0.16?arch=el3
purl pkg:rpm/redhat/seamonkey@1.0.9-0.16?arch=el3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44pm-j3ma-9qgx
1
vulnerability VCID-474s-ddrw-4fgr
2
vulnerability VCID-74k3-cpxf-f3ag
3
vulnerability VCID-8h4q-2ubw-vudu
4
vulnerability VCID-gy61-bm88-u3e7
5
vulnerability VCID-jktq-6e2e-2ya7
6
vulnerability VCID-m1wx-33dp-myds
7
vulnerability VCID-snrh-b3y9-gybx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/seamonkey@1.0.9-0.16%3Farch=el3
4
url pkg:rpm/redhat/seamonkey@1.0.9-15?arch=el4
purl pkg:rpm/redhat/seamonkey@1.0.9-15?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44pm-j3ma-9qgx
1
vulnerability VCID-474s-ddrw-4fgr
2
vulnerability VCID-74k3-cpxf-f3ag
3
vulnerability VCID-8h4q-2ubw-vudu
4
vulnerability VCID-gy61-bm88-u3e7
5
vulnerability VCID-jktq-6e2e-2ya7
6
vulnerability VCID-m1wx-33dp-myds
7
vulnerability VCID-snrh-b3y9-gybx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/seamonkey@1.0.9-15%3Farch=el4
5
url pkg:rpm/redhat/thunderbird@1.5.0.12-10?arch=el4
purl pkg:rpm/redhat/thunderbird@1.5.0.12-10?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44pm-j3ma-9qgx
1
vulnerability VCID-474s-ddrw-4fgr
2
vulnerability VCID-74k3-cpxf-f3ag
3
vulnerability VCID-gy61-bm88-u3e7
4
vulnerability VCID-jktq-6e2e-2ya7
5
vulnerability VCID-m1wx-33dp-myds
6
vulnerability VCID-snrh-b3y9-gybx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@1.5.0.12-10%3Farch=el4
6
url pkg:rpm/redhat/thunderbird@1.5.0.12-11?arch=el5_1
purl pkg:rpm/redhat/thunderbird@1.5.0.12-11?arch=el5_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44pm-j3ma-9qgx
1
vulnerability VCID-474s-ddrw-4fgr
2
vulnerability VCID-74k3-cpxf-f3ag
3
vulnerability VCID-gy61-bm88-u3e7
4
vulnerability VCID-jktq-6e2e-2ya7
5
vulnerability VCID-m1wx-33dp-myds
6
vulnerability VCID-snrh-b3y9-gybx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@1.5.0.12-11%3Farch=el5_1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1238.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1238.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-1238
reference_id
reference_type
scores
0
value 0.05425
scoring_system epss
scoring_elements 0.90176
published_at 2026-04-21T12:55:00Z
1
value 0.05425
scoring_system epss
scoring_elements 0.90118
published_at 2026-04-01T12:55:00Z
2
value 0.05425
scoring_system epss
scoring_elements 0.90121
published_at 2026-04-02T12:55:00Z
3
value 0.05425
scoring_system epss
scoring_elements 0.90133
published_at 2026-04-04T12:55:00Z
4
value 0.05425
scoring_system epss
scoring_elements 0.90137
published_at 2026-04-07T12:55:00Z
5
value 0.05425
scoring_system epss
scoring_elements 0.90153
published_at 2026-04-08T12:55:00Z
6
value 0.05425
scoring_system epss
scoring_elements 0.90159
published_at 2026-04-09T12:55:00Z
7
value 0.05425
scoring_system epss
scoring_elements 0.90168
published_at 2026-04-11T12:55:00Z
8
value 0.05425
scoring_system epss
scoring_elements 0.90167
published_at 2026-04-12T12:55:00Z
9
value 0.05425
scoring_system epss
scoring_elements 0.90162
published_at 2026-04-13T12:55:00Z
10
value 0.05425
scoring_system epss
scoring_elements 0.90179
published_at 2026-04-18T12:55:00Z
11
value 0.07189
scoring_system epss
scoring_elements 0.91612
published_at 2026-04-29T12:55:00Z
12
value 0.07189
scoring_system epss
scoring_elements 0.91615
published_at 2026-04-24T12:55:00Z
13
value 0.07189
scoring_system epss
scoring_elements 0.91614
published_at 2026-04-26T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-1238
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=438724
reference_id 438724
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=438724
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1238
reference_id CVE-2008-1238
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1238
4
reference_url https://security.gentoo.org/glsa/200805-18
reference_id GLSA-200805-18
reference_type
scores
url https://security.gentoo.org/glsa/200805-18
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2008-16
reference_id mfsa2008-16
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2008-16
6
reference_url https://access.redhat.com/errata/RHSA-2008:0207
reference_id RHSA-2008:0207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0207
7
reference_url https://access.redhat.com/errata/RHSA-2008:0208
reference_id RHSA-2008:0208
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0208
8
reference_url https://access.redhat.com/errata/RHSA-2008:0209
reference_id RHSA-2008:0209
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0209
9
reference_url https://usn.ubuntu.com/592-1/
reference_id USN-592-1
reference_type
scores
url https://usn.ubuntu.com/592-1/
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.1
Risk_score0.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-474s-ddrw-4fgr