Information disclosure in Mozilla Firefox

CVE-2008-4069

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file.

Vulnerability class: Information Disclosure

EPSS: 0.017 (74.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References