Lucene search

RedhatCVE-2007-3738

HistoryJul 18, 2007 - 5:30 p.m.

CVE-2007-3738

2007-07-1817:30:00

redhat

web.nvd.nist.gov

cve-2007-3738

mozilla firefox

2.0.0.5

remote code execution

xpcnativewrapper

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.7

Confidence

High

EPSS

0.709

Percentile

98.1%

JSON

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.

Affected configurations

Nvd

Node

mozillafirefoxMatch2.0

mozillafirefoxMatch2.0.0.1

mozillafirefoxMatch2.0.0.2

mozillafirefoxMatch2.0.0.3

mozillafirefoxMatch2.0.0.4

VendorProductVersionCPE
mozillafirefox2.0cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*
mozillafirefox2.0.0.1cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*
mozillafirefox2.0.0.2cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*
mozillafirefox2.0.0.3cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*
mozillafirefox2.0.0.4cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	2.0	cpe:2.3:a:mozilla:firefox:2.0:::::::*
mozilla	firefox	2.0.0.1	cpe:2.3:a:mozilla:firefox:2.0.0.1:::::::*
mozilla	firefox	2.0.0.2	cpe:2.3:a:mozilla:firefox:2.0.0.2:::::::*
mozilla	firefox	2.0.0.3	cpe:2.3:a:mozilla:firefox:2.0.0.3:::::::*
mozilla	firefox	2.0.0.4	cpe:2.3:a:mozilla:firefox:2.0.0.4:::::::*

References

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt

ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

secunia.com/advisories/25589

secunia.com/advisories/26072

secunia.com/advisories/26095

secunia.com/advisories/26103

secunia.com/advisories/26106

secunia.com/advisories/26107

secunia.com/advisories/26149

secunia.com/advisories/26151

secunia.com/advisories/26159

secunia.com/advisories/26179

secunia.com/advisories/26204

secunia.com/advisories/26205

secunia.com/advisories/26211

secunia.com/advisories/26216

secunia.com/advisories/26258

secunia.com/advisories/26271

secunia.com/advisories/26460

secunia.com/advisories/28135

sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1

sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1

support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html

www.debian.org/security/2007/dsa-1337

www.debian.org/security/2007/dsa-1338

www.debian.org/security/2007/dsa-1339

www.gentoo.org/security/en/glsa/glsa-200708-09.xml

www.mandriva.com/security/advisories?name=MDKSA-2007:152

www.mozilla.org/security/announce/2007/mfsa2007-25.html

www.novell.com/linux/security/advisories/2007_49_mozilla.html

www.novell.com/linux/security/advisories/2007_57_mozilla.html

www.redhat.com/support/errata/RHSA-2007-0722.html

www.redhat.com/support/errata/RHSA-2007-0723.html

www.redhat.com/support/errata/RHSA-2007-0724.html

www.securityfocus.com/archive/1/474226/100/0/threaded

www.securityfocus.com/archive/1/474542/100/0/threaded

www.securityfocus.com/bid/24946

www.securitytracker.com/id?1018414

www.ubuntu.com/usn/usn-490-1

www.vupen.com/english/advisories/2007/2564

www.vupen.com/english/advisories/2007/4256

exchange.xforce.ibmcloud.com/vulnerabilities/35460

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9875

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.7

Confidence

High

EPSS

0.709

Percentile

98.1%

JSON

Related for CVE-2007-3738