Search for vulnerabilities
Vulnerability details: VCID-9f73-w3dm-aaae
Vulnerability ID VCID-9f73-w3dm-aaae
Aliases CVE-2008-5021
Summary CVE-2008-5021 Mozilla crash and remote code execution in nsFrameManager
Status Published
Exploitability 2.0
Weighted Severity 9.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-399 Resource Management Errors
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
System Score Found at
rhas Moderate https://access.redhat.com/errata/RHSA-2008:0976
rhas Critical https://access.redhat.com/errata/RHSA-2008:0977
rhas Critical https://access.redhat.com/errata/RHSA-2008:0978
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.14939 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.16195 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.2557 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.67243 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.67243 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.70293 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.70293 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.82825 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.83611 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
epss 0.83611 https://api.first.org/data/v1/epss?cve=CVE-2008-5021
rhbs urgent https://bugzilla.redhat.com/show_bug.cgi?id=470894
cvssv2 9.3 https://nvd.nist.gov/vuln/detail/CVE-2008-5021
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2008-55
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5021.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5021
https://bugzilla.mozilla.org/show_bug.cgi?id=460002
http://secunia.com/advisories/32684
http://secunia.com/advisories/32693
http://secunia.com/advisories/32694
http://secunia.com/advisories/32695
http://secunia.com/advisories/32713
http://secunia.com/advisories/32714
http://secunia.com/advisories/32715
http://secunia.com/advisories/32721
http://secunia.com/advisories/32778
http://secunia.com/advisories/32798
http://secunia.com/advisories/32845
http://secunia.com/advisories/32853
http://secunia.com/advisories/33433
http://secunia.com/advisories/33434
http://secunia.com/advisories/34501
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9642
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
http://ubuntu.com/usn/usn-667-1
http://www.debian.org/security/2008/dsa-1669
http://www.debian.org/security/2008/dsa-1671
http://www.debian.org/security/2009/dsa-1696
http://www.debian.org/security/2009/dsa-1697
http://www.mandriva.com/security/advisories?name=MDVSA-2008:228
http://www.mandriva.com/security/advisories?name=MDVSA-2008:230
http://www.mandriva.com/security/advisories?name=MDVSA-2008:235
http://www.mozilla.org/security/announce/2008/mfsa2008-55.html
http://www.redhat.com/support/errata/RHSA-2008-0976.html
http://www.redhat.com/support/errata/RHSA-2008-0977.html
http://www.redhat.com/support/errata/RHSA-2008-0978.html
http://www.securityfocus.com/bid/32281
http://www.securitytracker.com/id?1021186
http://www.us-cert.gov/cas/techalerts/TA08-319A.html
http://www.vupen.com/english/advisories/2008/3146
http://www.vupen.com/english/advisories/2009/0977
470894 https://bugzilla.redhat.com/show_bug.cgi?id=470894
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*
cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*
cpe:2.3:o:novell:open_enterprise_server:-:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:novell:open_enterprise_server:-:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*
CVE-2008-5021 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5021
CVE-2008-5021 https://nvd.nist.gov/vuln/detail/CVE-2008-5021
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2008-55 https://www.mozilla.org/en-US/security/advisories/mfsa2008-55
RHSA-2008:0976 https://access.redhat.com/errata/RHSA-2008:0976
RHSA-2008:0977 https://access.redhat.com/errata/RHSA-2008:0977
RHSA-2008:0978 https://access.redhat.com/errata/RHSA-2008:0978
USN-667-1 https://usn.ubuntu.com/667-1/
USN-668-1 https://usn.ubuntu.com/668-1/
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2008-5021
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.93984
EPSS Score 0.14939
Published At April 2, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.