PT-2007-6682 · Mozilla · Firefox

Publicado 2007-10-29 · Atualizado 2018-10-15 · CVE-2007-5691

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 2.0.0.7

Description The issue is related to a denial of service (application crash) that can be caused by remote FTP servers sending a crafted reply to an unspecified listing command. This is due to "reading from invalid pointer" in the ParseFTPList.cpp file.

Recommendations For Mozilla Firefox version 2.0.0.7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-5691

Produtos afetados

Firefox

Referências · 7

• http://securityfocus.com/bid/26159 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5691 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37334 · Nota
• http://osvdb.org/43609 · Nota
• http://securityfocus.com/archive/1/482597/100/0/threaded · Nota
• http://eleytt.com/advisories/eleytt_FFPARSEFTPLIST.pdf · Nota
• http://securityreason.com/securityalert/3319 · Nota