CVE ID:	CVE-2008-0017
Description:	The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
Test IDs:	1.3.6.1.4.1.25623.1.0.61934   1.3.6.1.4.1.25623.1.0.61851   1.3.6.1.4.1.25623.1.0.61850
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0017 ISS Security Advisory: 20081113 Mozilla Unchecked Allocation Remote Code Execution http://www.iss.net/threats/311.html https://bugzilla.mozilla.org/show_bug.cgi?id=443299 Debian Security Information: DSA-1669 (Google Search) http://www.debian.org/security/2008/dsa-1669 Debian Security Information: DSA-1671 (Google Search) http://www.debian.org/security/2008/dsa-1671 Debian Security Information: DSA-1697 (Google Search) http://www.debian.org/security/2009/dsa-1697 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:228 http://www.mandriva.com/security/advisories?name=MDVSA-2008:230 RedHat Security Advisories: RHSA-2008:0977 http://www.redhat.com/support/errata/RHSA-2008-0977.html RedHat Security Advisories: RHSA-2008:0978 http://www.redhat.com/support/errata/RHSA-2008-0978.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 SuSE Security Announcement: SUSE-SA:2008:055 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html http://ubuntu.com/usn/usn-667-1 Cert/CC Advisory: TA08-319A http://www.us-cert.gov/cas/techalerts/TA08-319A.html BugTraq ID: 32281 http://www.securityfocus.com/bid/32281 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11005 http://www.securitytracker.com/id?1021185 http://secunia.com/advisories/34501 http://secunia.com/advisories/32684 http://secunia.com/advisories/32713 http://secunia.com/advisories/32778 http://secunia.com/advisories/32853 http://www.vupen.com/english/advisories/2008/3146 http://secunia.com/advisories/32721 http://secunia.com/advisories/32845 http://secunia.com/advisories/32693 http://secunia.com/advisories/32694 http://secunia.com/advisories/32695 http://secunia.com/advisories/32714 http://secunia.com/advisories/33433 http://www.vupen.com/english/advisories/2009/0977

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: