CVE-2007-2868 — Code Injection in Mozilla Firefox

CWE-94 — Code Injection17 documents5 sources
Severity
9.3CRITICALNVD
EPSS
27.7%
top 3.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird
Timeline
PublishedJun 1
Latest updateMay 1

Description

Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox16 versions+15
▶NVDmozilla/seamonkey1.0.9, 1.1.2+1
▶NVDmozilla/thunderbird15 versions+14

🔴Vulnerability Details

1
GHSA
GHSA-w9hq-9p5j-3m24: Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1↗2022-05-01
▶

📋Vendor Advisories

7
Ubuntu
Thunderbird vulnerabilities↗2007-06-06
▶
Ubuntu
Firefox vulnerabilities↗2007-06-01
▶
Red Hat
security flaw↗2007-05-31
▶
Red Hat
Multiple Firefox flaws (CVE-2007-1562, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)↗2007-05-31
▶
Red Hat
Multiple Firefox flaws (CVE-2007-1562, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)↗2007-05-31
▶

💬Community

8
Bugzilla
CVE-2007-2868 security flaw↗2018-08-16
▶
Bugzilla
CVE-2007-1362 Miltiple Thunderbird flaws (CVE-2007-1558, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2871)↗2007-06-18
▶
Bugzilla
CVE-2007-1362 Miltiple Thunderbird flaws (CVE-2007-1558, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2871)↗2007-05-31
▶
Bugzilla
CVE-2007-1362 Multiple Firefox flaws (CVE-2007-1562, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)↗2007-05-31
▶
Bugzilla
CVE-2007-1362 Miltiple Seamonkey flaws (CVE-2007-1562, CVE-2007-1558, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)↗2007-05-31
▶
CVE-2007-2868 — Code Injection in Mozilla Firefox | cvebase