CVE-2008-3444
Firefox 3.0-3.0.1 - Denial of Service via Crafted HTML Tags
Title source: llmDescription
The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted but well-formed web page that contains "a simple set of legitimate HTML tags."
References (5)
Core 5
Core References
Various Sources x_refsource_confirm
http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/
Various Sources x_refsource_misc
http://www.radware.com/newsevents/pressrelease.aspx?id=6459
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44169
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=448564
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/30486
Scores
EPSS
0.0163
EPSS Percentile
73.5%
Details
CWE
CWE-20
Status
published
Products (2)
mozilla/firefox
3.0
mozilla/firefox
3.0.1
Published
Aug 04, 2008
Tracked Since
Feb 18, 2026