CVE-2007-0776
published 2007-02-26CVE-2007-0776: Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8…
PriorityP340critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
6.74%
93.2th percentile
Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | <= 2.0.0.1 | — |
| mozilla | seamonkey | <= 1.0.7 | — |
| mozilla | thunderbird | <= 1.5.0.9 | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_ubuntu6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9xpj-q2q2-5w8q: Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2
ghsa_unreviewed·2022-05-01
CVE-2007-0776 [HIGH] CWE-119 GHSA-9xpj-q2q2-5w8q: Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2
Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file.
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2007-03-07·CVSS 6.8
CVE-2007-0008 [MEDIUM] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Thunderbird vulnerabilities
The SSLv2 protocol support in the NSS library did not sufficiently
check the validity of public keys presented with a SSL certificate. A
malicious SSL web site using SSLv2 could potentially exploit this to
execute arbitrary code with the user's privileges. (CVE-2007-0008)
The SSLv2 protocol support in the NSS library did not sufficiently
verify the validity of client master keys presented in an SSL client
certificate. A remote attacker could exploit this to execute arbitrary
code in a server application that uses the NSS library. (CVE-2007-0009)
Various flaws have been reported that could allow an attacker to execute
arbitrary code with user privileges by tricking the user into opening a
malicious web page. (CVE-20
Ubuntu
Firefox regression
vendor_ubuntu·2007-03-02·CVSS 5.0
[MEDIUM] Firefox regression
Title: Firefox regression
Summary: Firefox regression
USN-428-1 fixed vulnerabilities in Firefox 1.5. However, changes to
library paths caused applications depending on libnss3 to fail to start
up. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Several flaws have been found that could be used to perform Cross-site
scripting attacks. A malicious web site could exploit these to modify
the contents or steal confidential data (such as passwords) from other
opened web pages. (CVE-2006-6077, CVE-2007-0780, CVE-2007-0800,
CVE-2007-0981, CVE-2007-0995, CVE-2007-0996)
The SSLv2 protocol support in the NSS library did not sufficiently
check the validity of public keys presented with a SSL certificate. A
malicious SSL web site using SSLv2 could pot
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2007-03-01·CVSS 5.0
CVE-2007-1092 [MEDIUM] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox vulnerabilities
Several flaws have been found that could be used to perform Cross-site
scripting attacks. A malicious web site could exploit these to modify
the contents or steal confidential data (such as passwords) from other
opened web pages. (CVE-2006-6077, CVE-2007-0780, CVE-2007-0800,
CVE-2007-0981, CVE-2007-0995, CVE-2007-0996)
The SSLv2 protocol support in the NSS library did not sufficiently
check the validity of public keys presented with a SSL certificate. A
malicious SSL web site using SSLv2 could potentially exploit this to
execute arbitrary code with the user's privileges. (CVE-2007-0008)
The SSLv2 protocol support in the NSS library did not sufficiently
verify the validity of client master keys presented in an SSL client
ce
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://fedoranews.org/cms/node/2713http://fedoranews.org/cms/node/2728http://fedoranews.org/cms/node/2747http://fedoranews.org/cms/node/2749http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.htmlhttp://secunia.com/advisories/24205http://secunia.com/advisories/24238http://secunia.com/advisories/24252http://secunia.com/advisories/24293http://secunia.com/advisories/24320http://secunia.com/advisories/24328http://secunia.com/advisories/24333http://secunia.com/advisories/24384http://secunia.com/advisories/24389http://secunia.com/advisories/24393http://secunia.com/advisories/24406http://secunia.com/advisories/24410http://secunia.com/advisories/24437http://secunia.com/advisories/24455http://secunia.com/advisories/24456http://secunia.com/advisories/24457http://secunia.com/advisories/24522http://security.gentoo.org/glsa/glsa-200703-04.xmlhttp://security.gentoo.org/glsa/glsa-200703-18.xmlhttp://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851http://www.gentoo.org/security/en/glsa/glsa-200703-08.xmlhttp://www.kb.cert.org/vuls/id/551436http://www.mandriva.com/security/advisories?name=MDKSA-2007:052http://www.mozilla.org/security/announce/2007/mfsa2007-01.htmlhttp://www.novell.com/linux/security/advisories/2007_22_mozilla.htmlhttp://www.osvdb.org/32113http://www.securityfocus.com/archive/1/461336/100/0/threadedhttp://www.securityfocus.com/archive/1/461809/100/0/threadedhttp://www.securityfocus.com/bid/22694http://www.securitytracker.com/id?1017698http://www.ubuntu.com/usn/usn-428-1http://www.ubuntu.com/usn/usn-431-1http://www.vupen.com/english/advisories/2007/0718http://www.vupen.com/english/advisories/2007/0719http://www.vupen.com/english/advisories/2008/0083https://bugzilla.mozilla.org/show_bug.cgi?id=360645https://exchange.xforce.ibmcloud.com/vulnerabilities/32698https://issues.rpath.com/browse/RPL-1081http://fedoranews.org/cms/node/2713http://fedoranews.org/cms/node/2728http://fedoranews.org/cms/node/2747http://fedoranews.org/cms/node/2749http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.htmlhttp://secunia.com/advisories/24205http://secunia.com/advisories/24238http://secunia.com/advisories/24252http://secunia.com/advisories/24293http://secunia.com/advisories/24320http://secunia.com/advisories/24328http://secunia.com/advisories/24333http://secunia.com/advisories/24384http://secunia.com/advisories/24389http://secunia.com/advisories/24393http://secunia.com/advisories/24406http://secunia.com/advisories/24410http://secunia.com/advisories/24437http://secunia.com/advisories/24455http://secunia.com/advisories/24456http://secunia.com/advisories/24457http://secunia.com/advisories/24522http://security.gentoo.org/glsa/glsa-200703-04.xmlhttp://security.gentoo.org/glsa/glsa-200703-18.xmlhttp://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851http://www.gentoo.org/security/en/glsa/glsa-200703-08.xmlhttp://www.kb.cert.org/vuls/id/551436http://www.mandriva.com/security/advisories?name=MDKSA-2007:052http://www.mozilla.org/security/announce/2007/mfsa2007-01.htmlhttp://www.novell.com/linux/security/advisories/2007_22_mozilla.htmlhttp://www.osvdb.org/32113http://www.securityfocus.com/archive/1/461336/100/0/threadedhttp://www.securityfocus.com/archive/1/461809/100/0/threadedhttp://www.securityfocus.com/bid/22694http://www.securitytracker.com/id?1017698http://www.ubuntu.com/usn/usn-428-1http://www.ubuntu.com/usn/usn-431-1http://www.vupen.com/english/advisories/2007/0718http://www.vupen.com/english/advisories/2007/0719http://www.vupen.com/english/advisories/2008/0083https://bugzilla.mozilla.org/show_bug.cgi?id=360645https://exchange.xforce.ibmcloud.com/vulnerabilities/32698https://issues.rpath.com/browse/RPL-1081
2007-02-26
Published