PT-2007-1128 · Mozilla · Firefox

Published 2007-10-10 · Updated 2017-08-29 · CVE-2007-5341

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 2.0.0.8

Description: The issue is related to a buffer overflow in the Venkman script debugger, which can lead to remote code execution. This allows a remote attacker to execute arbitrary code.

Recommendations: For versions prior to 2.0.0.8, update to version 2.0.0.8 or later to resolve the issue. As a temporary workaround, consider disabling the Venkman script debugger until a patch is available. Restrict access to the debugger to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2017-02020

CVE-2007-5341

Affected Products

Firefox

References · 5

• https://bugzilla.mozilla.org/show_bug.cgi?id=325761 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=345305 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5341 · Security Note
• https://bdu.fstec.ru/vul/2017-02020 · Security Note
• https://bugzilla.suse.com/show_bug.cgi?id=332512 · Note