Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2008-11-13T11:00:00

Updated: 2017-09-28T12:57:01

Reserved: 2008-11-10T00:00:00


Link: CVE-2008-5013

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2008-11-13T11:30:01.220

Modified: 2018-10-30T16:25:57.607


Link: CVE-2008-5013

JSON object: View

cve-icon Redhat Information

No data.

CWE