CVE ID:	CVE-2008-0420
Description:	modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
Test IDs:	1.3.6.1.4.1.25623.1.0.60473   1.3.6.1.4.1.25623.1.0.60536
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0420 BugTraq ID: 27826 http://www.securityfocus.com/bid/27826 Bugtraq: 20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service (Google Search) http://www.securityfocus.com/archive/1/488264/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119 http://securitytracker.com/id?1019434 http://secunia.com/advisories/28758 http://secunia.com/advisories/28839 http://secunia.com/advisories/29049 http://secunia.com/advisories/29098 http://secunia.com/advisories/29167 http://secunia.com/advisories/30327 http://secunia.com/advisories/30620 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 https://usn.ubuntu.com/576-1/ http://www.ubuntu.com/usn/usn-582-1 http://www.ubuntu.com/usn/usn-582-2 http://www.vupen.com/english/advisories/2008/0627/references http://www.vupen.com/english/advisories/2008/1793/references XForce ISS Database: firefox-bmp-dos(40606) https://exchange.xforce.ibmcloud.com/vulnerabilities/40606 XForce ISS Database: firefox-bmp-information-disclosure(40491) https://exchange.xforce.ibmcloud.com/vulnerabilities/40491