PT-2007-2226 · Mozilla+1 · Firefox+2

Published

2007-02-23

·

Updated

2019-10-09

·

CVE-2007-0778

CVSS v2.0

5.4

Medium

VectorAV:N/AC:H/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 1.5.0.10 Mozilla Firefox versions 2.x prior to 2.0.0.2 SeaMonkey versions prior to 1.0.8
Description The issue allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache, due to hash collisions generated by the page cache feature.
Recommendations For Mozilla Firefox versions prior to 1.5.0.10, update to version 1.5.0.10 or later. For Mozilla Firefox versions 2.x prior to 2.0.0.2, update to version 2.0.0.2 or later. For SeaMonkey versions prior to 1.0.8, update to version 1.0.8 or later.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2007-0778
DSA-1336-1
HPSBUX02153
RHSA-2007:0077
RHSA-2007:0078
RHSA-2007:0079
RHSA-2007:0097
RHSA-2007:0108
RHSA-2007_0077
RHSA-2007_0078
RHSA-2007_0079
RHSA-2007_0097
RHSA-2007_0108

Affected Products

Firefox
Red Hat
Seamonkey