PT-2007-3504 · Mozilla+1 · Firefox+1

Publicado 2007-04-22 · Atualizado 2018-10-16 · CVE-2007-2162

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 2.0.0.3 GNU IceWeasel version 2.0.0.3

Description The issue allows remote attackers to cause a denial of service, resulting in a browser crash or system hang, via JavaScript that matches a regular expression against a long string.

Recommendations For Mozilla Firefox version 2.0.0.3, consider disabling JavaScript execution until a patch is available. For GNU IceWeasel version 2.0.0.3, consider disabling JavaScript execution until a patch is available.

Correção

Identificadores relacionados

CVE-2007-2162

Produtos afetados

Gnu Iceweasel

Firefox

Referências · 4

• http://securityfocus.com/archive/1/466017/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2162 · Nota de Segurança
• http://securityfocus.com/archive/1/466220/100/0/threaded · Nota
• http://securityfocus.com/archive/1/466147/100/0/threaded · Nota