CVE-2008-4061: Canonical Ubuntu Linux

High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days.

Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via an mtd element with a large integer value in the rowspan attribute, related to the layout engine.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 7.04 only; version 7.10 only; version 8.04 only
• Debian Debian Linux: version 4.0 only
• Mozilla Firefox: before 2.0.0.17 (fixed in 2.0.0.17); from 3.0, before 3.0.2 (fixed in 3.0.2)
• Mozilla Seamonkey: before 1.1.12 (fixed in 1.1.12)
• Mozilla Thunderbird: before 2.0.0.17 (fixed in 2.0.0.17)

Published 2008-09-24. Last modified 2026-06-16.