PT-2007-6682 · Mozilla · Firefox

Published 2007-10-29 · Updated 2018-10-15 · CVE-2007-5691

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 2.0.0.7

Description The issue is related to a denial of service (application crash) that can be caused by remote FTP servers sending a crafted reply to an unspecified listing command. This is due to "reading from invalid pointer" in the ParseFTPList.cpp file.

Recommendations For Mozilla Firefox version 2.0.0.7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-5691

Affected Products

Firefox

References · 7

• http://securityfocus.com/bid/26159 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5691 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37334 · Note
• http://osvdb.org/43609 · Note
• http://securityfocus.com/archive/1/482597/100/0/threaded · Note
• http://eleytt.com/advisories/eleytt_FFPARSEFTPLIST.pdf · Note
• http://securityreason.com/securityalert/3319 · Note