CVE-2008-4324

CVE-2008-4324 describes a denial-of-service vulnerability in Mozilla Firefox 3.0.3 on Windows XP SP2, and later confirmed on Firefox 3.0.2 on Mac OS X 10.5, where a NULL pointer dereference and application crash can be triggered by a sequence of user interface events. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it can be exploited remotely with low attack complexity and no authentication required, leading to a partial impact on availability. While not listed on the CISA KEV catalog or Hot List, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.