PT-2007-2223 · Mozilla+1 · Firefox+3

Jesse Ruderman + 2 · Published 2007-02-23 · Updated 2024-12-12 · CVE-2007-0775

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 1.5.0.10 Mozilla Firefox versions 2.x prior to 2.0.0.2 Thunderbird versions prior to 1.5.0.10 SeaMonkey versions prior to 1.0.8

Description The issue affects the layout engine, allowing remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via certain vectors.

Recommendations For Mozilla Firefox versions prior to 1.5.0.10, update to version 1.5.0.10 or later. For Mozilla Firefox versions 2.x prior to 2.0.0.2, update to version 2.0.0.2 or later. For Thunderbird versions prior to 1.5.0.10, update to version 1.5.0.10 or later. For SeaMonkey versions prior to 1.0.8, update to version 1.0.8 or later.

Fix

Related Identifiers

CVE-2007-0775

DSA-1336-1

HPSBUX02153

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2007:0077

RHSA-2007:0078

RHSA-2007:0079

RHSA-2007:0097

RHSA-2007:0108

RHSA-2007_0077

RHSA-2007_0078

RHSA-2007_0079

RHSA-2007_0097

RHSA-2007_0108

Affected Products

Firefox

Red Hat

Seamonkey

Thunderbird

References · 2082

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2777 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5947 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2775 · Security Note
• https://bdu.fstec.ru/vul/2016-02223 · Security Note
• http://secunia.com/advisories/24205 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1727 · Security Note
• http://fedoranews.org/cms/node/2747 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3801 · Security Note
• https://bdu.fstec.ru/vul/2015-01376 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2780 · Security Note
• http://secunia.com/advisories/24393 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1726 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6502 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5337 · Security Note