vulnwire
9.3crit

CVE-2007-2867

Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.4%
percentile 89%
Public exploits
0
none known

Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.

Exploit prediction (EPSS)

3.41% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • secunia.com /advisories/25496 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1018153 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • fedoranews.org /cms/node/2747 · vendor-advisory, x_refsource_FEDORA, x_transferred
  • debian.org /security/2007/dsa-1308 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/34604 · vdb-entry, x_refsource_XF, x_transferred
  • securitytracker.com /id?1018151 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • mozilla.org /security/announce/2007/mfsa2007-12.html · x_refsource_CONFIRM, x_transferred
  • h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?objectID=c00774579 · vendor-advisory, x_refsource_HP, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:120 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/27423 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/470172/100/200/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/24406 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25647 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25469 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?objectID=c00771742 · vendor-advisory, x_refsource_HP, x_transferred
  • osvdb.org /35134 · vdb-entry, x_refsource_OSVDB, x_transferred
  • novell.com /linux/security/advisories/2007_36_mozilla.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/25491 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • security.gentoo.org /glsa/glsa-200706-06.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/25635 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25534 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/1994 · vdb-entry, x_refsource_VUPEN, x_transferred
  • redhat.com /support/errata/RHSA-2007-0400.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • fedoranews.org /cms/node/2749 · vendor-advisory, x_refsource_FEDORA, x_transferred
  • slackware.com /security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
  • ubuntu.com /usn/usn-469-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:131 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • debian.org /security/2007/dsa-1305 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • secunia.com /advisories/25533 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10066 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • debian.org /security/2007/dsa-1306 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • issues.rpath.com /browse/RPL-1424 · x_refsource_CONFIRM, x_transferred
  • kb.cert.org /vuls/id/751636 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • secunia.com /advisories/25664 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:119 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • slackware.com /security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-103136-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/24456 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25644 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25858 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25476
  • secunia.com /advisories/25488
  • secunia.com /advisories/25489
  • secunia.com /advisories/25490
  • secunia.com /advisories/25492
  • secunia.com /advisories/25559
  • secunia.com /advisories/25685
  • secunia.com /advisories/25750
  • secunia.com /advisories/28363
  • sunsolve.sun.com /search/document.do?assetkey=1-66-201532-1
  • debian.org /security/2007/dsa-1300
  • mandriva.com /security/advisories?name=MDKSA-2007:126

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.