Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2007-01
HistoryFeb 23, 2007 - 12:00 a.m.

Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) — Mozilla

2007-02-2300:00:00
Mozilla Foundation
www.mozilla.org
17

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.971

Percentile

99.8%

JSON

As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases we fixed several bugs to improve the stability of the product. Some of these were crashes that showed evidence of memory corruption and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

Affected configurations

Vulners
Node
mozillafirefoxRange<1.5.0.10
OR
mozillafirefoxRange<2.0.0.2
OR
mozillaseamonkeyRange<1.0.8
OR
mozillathunderbirdRange<1.5.0.10
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
mozillathunderbird*cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

References

Related

securityvulns 2
nessus 38
ubuntu 3
openvas 30
gentoo 3
cve 3
checkpoint_advisories 3
prion 3
ubuntucve 3
cert 3
cvelist 3
nvd 3
veracode 2
freebsd 1
suse 2
redhat 5
centos 5
oraclelinux 3
osv 1
debian 1
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-01
2007-02-27 00:00:00
Multiple Mozilla Firefox / Thunderbird / Seamonkey vulnerabilities
2007-03-06 00:00:00
nessus
nessus
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-2734)
2007-10-17 00:00:00
Mozilla Thunderbird < 1.5.0.10 Multiple Vulnerabilities
2007-03-02 00:00:00
Ubuntu 5.10 / 6.06 LTS / 6.10 : mozilla-thunderbird vulnerabilities (USN-431-1)
2007-11-10 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2007-03-07 00:00:00
Firefox vulnerabilities
2007-03-01 00:00:00
Firefox regression
2007-03-02 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-431-1)
2009-03-23 00:00:00
Mandriva Update for mozilla-thunderbird MDKSA-2007:052 (mozilla-thunderbird)
2009-04-09 00:00:00
Mandriva Update for mozilla-thunderbird MDKSA-2007:052 (mozilla-thunderbird)
2009-04-09 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2007-03-18 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2007-03-02 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-03-09 00:00:00
cve
cve
CVE-2007-0776
2007-02-26 19:28:00
CVE-2007-0777
2007-02-26 19:28:00
CVE-2007-0775
2007-02-26 19:28:00
checkpoint_advisories
checkpoint_advisories
Mozilla Browsers JavaScript Argument Passing Code Execution - Ver2 (CVE-2007-0777)
2014-12-28 00:00:00
Mozilla Firefox Floating Layer Column Layout Denial of Service - Ver2 (CVE-2007-0775)
2015-03-26 00:00:00
Mozilla Browsers JavaScript Argument Passing Code Execution (CVE-2007-0777)
2010-02-14 00:00:00
prion
prion
Memory corruption
2007-02-26 19:28:00
Heap overflow
2007-02-26 19:28:00
Design/Logic Flaw
2007-02-26 19:28:00
ubuntucve
ubuntucve
CVE-2007-0777
2007-02-26 00:00:00
CVE-2007-0776
2007-02-26 00:00:00
CVE-2007-0775
2007-02-26 00:00:00
cert
cert
Mozilla JavaScript engine vulnerable to memory corruption
2007-02-23 00:00:00
Mozilla Firefox SVG viewer vulnerable to integer overflow
2007-02-25 00:00:00
Mozilla layout engine contains multiple vulnerabilities
2007-02-26 00:00:00
cvelist
cvelist
CVE-2007-0776
2007-02-26 19:00:00
CVE-2007-0775
2007-02-26 19:00:00
CVE-2007-0777
2007-02-26 19:00:00
nvd
nvd
CVE-2007-0776
2007-02-26 19:28:00
CVE-2007-0777
2007-02-26 19:28:00
CVE-2007-0775
2007-02-26 19:28:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:12:50
Arbitrary Code Execution
2020-04-10 00:12:50
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
suse
suse
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
redhat
redhat
(RHSA-2007:0097) Critical: firefox security update
2007-03-14 00:00:00
(RHSA-2007:0108) Critical: thunderbird security update
2007-03-13 00:00:00
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
centos
centos
thunderbird security update
2007-03-04 11:06:21
seamonkey security update
2007-03-16 07:21:16
firefox security update
2007-02-24 13:53:25
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: Firefox security update
2007-02-24 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
osv
osv
mozilla-firefox
2007-07-22 00:00:00
debian
debian
[SECURITY] [DSA 1336-1] New mozilla-firefox packages fix several vulnerabilities
2007-07-22 17:43:28

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.971

Percentile

99.8%

JSON
Related for MFSA2007-01
securityvulns2nessus38ubuntu3openvas30gentoo3cve3checkpoint_advisories3prion3ubuntucve3cert3cvelist3nvd3veracode2freebsd1suse2redhat5centos5oraclelinux3osv1debian1