CVE-2007-0777 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer13 documents5 sources

Severity

9.3CRITICALNVD

EPSS

42.8%

top 2.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mozilla Firefox Mozilla Seamonkey Mozilla Thunderbird +1 more

Timeline

PublishedFeb 26

Latest updateMay 3

Description

The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox1.5 — 1.5.0.10+1

▶NVDmozilla/seamonkey< 1.0.8

▶NVDmozilla/thunderbird< 1.5.0.10

Also affects: Ubuntu Linux 5.10, 6.06, 6.10

Patches

Patch: www.mozilla.org ↗Patch: www.mozilla.org ↗

🔴Vulnerability Details

GHSA

GHSA-vv24-8fr3-mqjj: The JavaScript engine in Mozilla Firefox before 1↗2022-05-03

▶

📋Vendor Advisories

Ubuntu

Thunderbird vulnerabilities↗2007-03-07

▶

Ubuntu

Firefox regression↗2007-03-02

▶

Ubuntu

Firefox vulnerabilities↗2007-03-01

▶

Red Hat

security flaw↗2007-02-23

▶

💬Community

Bugzilla

CVE-2007-0777 security flaw↗2018-08-16

▶

Bugzilla

CVE-2007-3381 Gdm denial of service↗2007-07-10

▶

Bugzilla

CVE-2007-0775 Multiple Thunderbird flaws (CVE-2007-0777, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-0009, CVE-2007↗2007-03-01

▶

Bugzilla

▶

Bugzilla

CVE-2007-0775 Multiple Firefox flaws (CVE-2007-0777, CVE-2007-0994, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-000↗2007-02-26

▶