CVE-2007-0778 — Sensitive Information Exposure in Mozilla Firefox

CWE-200 — Sensitive Information Exposure11 documents5 sources

Severity

5.4MEDIUMNVD

EPSS

1.1%

top 21.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mozilla Firefox Mozilla Seamonkey Canonical Ubuntu Linux +1 more

Timeline

PublishedFeb 26

Latest updateMay 3

Description

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache.

CVSS vector

AV:N/AC:H/C:C/I:N/A:NExploitability: 4.9 | Impact: 6.9

Affected Packages2 packages

▶NVDmozilla/firefox1.5 — 1.5.0.10+1

▶NVDmozilla/seamonkey< 1.0.8

Also affects: Debian Linux 3.1, Ubuntu Linux 5.10, 6.06, 6.10

Patches

Patch: www.mozilla.org ↗Patch: www.mozilla.org ↗

🔴Vulnerability Details

GHSA

GHSA-cjvx-45vc-gv4r: The page cache feature in Mozilla Firefox before 1↗2022-05-03

▶

📋Vendor Advisories

Ubuntu

Firefox regression↗2007-03-02

▶

Ubuntu

Firefox vulnerabilities↗2007-03-01

▶

Red Hat

security flaw↗2007-02-23

▶

💬Community

Bugzilla

CVE-2007-0778 security flaw↗2018-08-16

▶

Bugzilla

CVE-2007-0775 Multiple Thunderbird flaws (CVE-2007-0777, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-0009, CVE-2007↗2007-03-01

▶

Bugzilla

▶

Bugzilla

CVE-2007-0775 Multiple Firefox flaws (CVE-2007-0777, CVE-2007-0994, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-000↗2007-02-26

▶

Bugzilla

CVE-2007-0775 Multiple Seamonkey flaws (CVE-2007-0777, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-0009, CVE-2007-0↗2007-02-23

▶