Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2007-12
HistoryMay 30, 2007 - 12:00 a.m.

Crashes with evidence of memory corruption (rv:1.8.0.12/1.8.1.4) — Mozilla

2007-05-3000:00:00
Mozilla Foundation
www.mozilla.org
17

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.969

Percentile

99.7%

JSON

As part of the Firefox 2.0.0.4 and 1.5.0.12 update releases Mozilla developers fixed many bugs to improve the stability of the product. Some of these crashes that showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

Affected configurations

Vulners
Node
mozillafirefoxRange<1.5.0.12
OR
mozillafirefoxRange<2.0.0.4
OR
mozillaseamonkeyRange<1.0.9
OR
mozillaseamonkeyRange<1.1.2
OR
mozillathunderbirdRange<1.5.0.12
OR
mozillathunderbirdRange<2.0.0.4
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
mozillathunderbird*cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

References

Related

securityvulns 2
nessus 47
openvas 70
ubuntu 2
fedora 16
osv 4
debian 4
nvd 2
checkpoint_advisories 3
prion 2
cvelist 2
veracode 2
cert 2
cve 2
ubuntucve 2
oraclelinux 3
redhat 3
centos 4
gentoo 1
suse 1
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-12
2007-06-01 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2007-06-05 00:00:00
nessus
nessus
Fedora 7 : thunderbird-2.0.0.4-1.fc7 (2007-0544)
2007-11-06 00:00:00
Mozilla Thunderbird < 1.5.0.12 Multiple Vulnerabilities
2007-05-31 00:00:00
Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:119)
2007-06-14 00:00:00
openvas
openvas
Fedora Update for thunderbird FEDORA-2007-0544
2009-02-27 00:00:00
Debian Security Advisory DSA 1305-1 (icedove)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-469-1)
2009-03-23 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2007-06-06 00:00:00
Firefox vulnerabilities
2007-06-01 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: thunderbird-2.0.0.4-1.fc7
2007-06-18 22:30:53
[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.12-1.fc5
2007-05-31 13:06:32
[SECURITY] Fedora Core 6 Update: thunderbird-1.5.0.12-1.fc6
2007-05-31 13:03:59
osv
osv
icedove - several vulnerabilities
2007-06-13 00:00:00
iceape
2007-06-07 00:00:00
iceweasel - several vulnerabilities
2007-06-14 00:00:00
debian
debian
[SECURITY] [DSA 1305-1] New icedove packages fix several vulnerabilities
2007-06-13 17:34:11
[SECURITY] [DSA 1306-1] New xulrunner packages fix several vulnerabilities
2007-06-12 15:57:27
[SECURITY] [DSA 1308-1] New iceweasel packages fix several vulnerabilities
2007-06-14 17:22:37
nvd
nvd
CVE-2007-2867
2007-06-01 00:30:00
CVE-2007-2868
2007-06-01 00:30:00
checkpoint_advisories
checkpoint_advisories
Mozilla Products Overflow Event Handling Memory Corruption (CVE-2007-2867)
2010-08-10 00:00:00
Mozilla Firefox SVG pathSegListgetItem Negative Argument Memory Corruption - Ver2 (CVE-2007-2867)
2015-03-26 00:00:00
Mozilla Products SVG Layout Engine Index Parameter Memory Corruption (CVE-2007-2867)
2010-01-18 00:00:00
prion
prion
Memory corruption
2007-06-01 00:30:00
Heap overflow
2007-06-01 00:30:00
cvelist
cvelist
CVE-2007-2868
2007-06-01 00:00:00
CVE-2007-2867
2007-06-01 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:18:38
Arbitrary Code Execution
2020-04-10 00:18:37
cert
cert
Mozilla products vulnerable to memory corruption in the JavaScript engine
2007-05-31 00:00:00
Mozilla Layout Engine memory corruption vulnerabilities
2007-05-31 00:00:00
cve
cve
CVE-2007-2868
2007-06-01 00:30:00
CVE-2007-2867
2007-06-01 00:30:00
ubuntucve
ubuntucve
CVE-2007-2867
2007-06-01 00:00:00
CVE-2007-2868
2007-06-01 00:00:00
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-05-31 00:00:00
Critical: firefox security update
2007-05-31 00:00:00
Critical: seamonkey security update
2007-05-31 00:00:00
redhat
redhat
(RHSA-2007:0401) Critical: thunderbird security update
2007-05-30 00:00:00
(RHSA-2007:0400) Critical: firefox security update
2007-05-30 00:00:00
(RHSA-2007:0402) Critical: seamonkey security update
2007-05-30 00:00:00
centos
centos
thunderbird security update
2007-05-31 21:22:54
devhelp, firefox, yelp security update
2007-05-31 21:22:44
devhelp, seamonkey security update
2007-05-31 21:23:00
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2007-06-19 00:00:00
suse
suse
remote code execution in mozilla,MozillaFirefox,MozillaThunderbird
2007-06-27 15:10:40

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.969

Percentile

99.7%

JSON
Related for MFSA2007-12
securityvulns2nessus47openvas70ubuntu2fedora16osv4debian4nvd2checkpoint_advisories3prion2cvelist2veracode2cert2cve2ubuntucve2oraclelinux3redhat3centos4gentoo1suse1