Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2007-29
HistoryOct 18, 2007 - 12:00 a.m.

Crashes with evidence of memory corruption (rv:1.8.1.8) — Mozilla

2007-10-1800:00:00
Mozilla Foundation
www.mozilla.org
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.967

Percentile

99.7%

JSON

As part of the Firefox 2.0.0.8 update releases Mozilla developers fixed many bugs to improve the stability of the product. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

Affected configurations

Vulners
Node
mozillafirefoxRange<2.0.0.8
OR
mozillaseamonkeyRange<1.1.5
OR
mozillathunderbirdRange<1.5.0.14
OR
mozillathunderbirdRange<2.0.0.9

Related

securityvulns 2
gentoo 2
nessus 39
openvas 38
checkpoint_advisories 1
ubuntucve 2
veracode 2
cert 2
nvd 3
prion 3
cve 3
cvelist 2
seebug 1
debian 4
osv 4
slackware 1
redhat 3
centos 4
fedora 4
oraclelinux 3
ubuntu 2
suse 1
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-29
2007-10-23 00:00:00
Mozilla Firefox /Thunderbird / Seamonkey multiple security vulnerabilities
2007-10-23 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2007-11-18 00:00:00
Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities
2007-11-12 00:00:00
nessus
nessus
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-4811)
2007-12-13 00:00:00
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-4874)
2008-01-10 00:00:00
Mozilla Thunderbird < 1.5.0.14 Multiple Vulnerabilities
2007-12-20 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200711-24 (mozilla-thunderbird mozilla-thunderbird-bin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200711-24 (mozilla-thunderbird mozilla-thunderbird-bin)
2008-09-24 00:00:00
Debian Security Advisory DSA 1391-1 (icedove)
2008-01-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox XBL Event Handler Tags Removal Memory Corruption (CVE-2007-5339)
2010-03-17 00:00:00
ubuntucve
ubuntucve
CVE-2007-5339
2007-10-21 00:00:00
CVE-2007-5340
2007-10-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:20:22
Denial Of Service (DoS)
2020-04-10 00:20:23
cert
cert
Mozilla products vulnerable to memory corruption in the browser engine
2007-10-19 00:00:00
Mozilla products vulnerable to memory corruption in the JavaScript engine
2007-10-19 00:00:00
nvd
nvd
CVE-2007-5339
2007-10-21 19:17:00
CVE-2007-5340
2007-10-21 19:17:00
CVE-2007-5336
2007-10-24 00:46:00
prion
prion
Memory corruption
2007-10-21 19:17:00
Memory corruption
2007-10-21 19:17:00
Design/Logic Flaw
2007-10-24 00:46:00
cve
cve
CVE-2007-5340
2007-10-21 19:17:00
CVE-2007-5339
2007-10-21 19:17:00
CVE-2007-5336
2022-10-03 16:14:30
cvelist
cvelist
CVE-2007-5340
2007-10-21 19:00:00
CVE-2007-5339
2007-10-21 19:00:00
seebug
seebug
Mozilla Firefox 2.0.0.7多个远程安全漏洞
2007-10-23 00:00:00
debian
debian
[SECURITY] [DSA 1391-1] New icedove packages fix several vulnerabilities
2007-10-19 15:55:05
[SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities
2007-10-20 11:56:10
[SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities
2007-11-05 23:44:32
osv
osv
icedove - several vulnerabilities
2007-10-19 00:00:00
xulrunner - several vulnerabilities
2007-10-20 00:00:00
iceape - several vulnerabilities
2007-11-05 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2007-11-21 00:24:34
redhat
redhat
(RHSA-2007:0980) Critical: seamonkey security update
2007-10-19 00:00:00
(RHSA-2007:0981) Moderate: thunderbird security update
2007-10-19 00:00:00
(RHSA-2007:0979) Critical: firefox security update
2007-10-19 00:00:00
centos
centos
seamonkey security update
2007-10-19 22:39:36
seamonkey security update
2007-10-22 02:25:42
firefox security update
2007-10-20 18:08:04
fedora
fedora
[SECURITY] Fedora 7 Update: thunderbird-2.0.0.9-1.fc7
2007-11-16 00:41:37
[SECURITY] Fedora 7 Update: seamonkey-1.1.5-1.fc7
2007-10-24 07:02:38
[SECURITY] Fedora 8 Update: thunderbird-2.0.0.9-1.fc8
2007-11-16 00:39:02
oraclelinux
oraclelinux
Moderate: thunderbird security update
2007-10-20 00:00:00
Critical: seamonkey security update
2007-10-20 00:00:00
Critical: firefox security update
2007-10-20 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2007-10-23 00:00:00
Firefox vulnerabilities
2007-10-22 00:00:00
suse
suse
remote code execution in MozillaFirefox,mozilla,seamonkey
2007-10-25 18:13:14

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.967

Percentile

99.7%

JSON
Related for MFSA2007-29
securityvulns2gentoo2nessus39openvas38checkpoint_advisories1ubuntucve2veracode2cert2nvd3prion3cve3cvelist2seebug1debian4osv4slackware1redhat3centos4fedora4oraclelinux3ubuntu2suse1