CVE-2008-2419 describes a denial-of-service vulnerability in Mozilla Firefox 2.0.0.14, where remote attackers can trigger heap corruption and an application crash, or potentially execute arbitrary code. This occurs due to an error condition during specific Iframe operations involving a JSframe write and close, such as loading an empty Java applet. The vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and a potential impact of partial availability. While not listed in CISA's KEV catalog, an exploit for denial of service is available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0.0.14CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.