PT-2007-3504 · Mozilla+1 · Firefox+1

Published 2007-04-22 · Updated 2018-10-16 · CVE-2007-2162

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 2.0.0.3 GNU IceWeasel version 2.0.0.3

Description The issue allows remote attackers to cause a denial of service, resulting in a browser crash or system hang, via JavaScript that matches a regular expression against a long string.

Recommendations For Mozilla Firefox version 2.0.0.3, consider disabling JavaScript execution until a patch is available. For GNU IceWeasel version 2.0.0.3, consider disabling JavaScript execution until a patch is available.

Fix

Related Identifiers

CVE-2007-2162

Affected Products

Gnu Iceweasel

Firefox

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-2162 · Security Note
• http://securityfocus.com/archive/1/466017/100/0/threaded · Note
• http://securityfocus.com/archive/1/466220/100/0/threaded · Note
• http://securityfocus.com/archive/1/466147/100/0/threaded · Note