CVE-2007-0777 The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) an...
HighCVSS 9.3
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | >= 1.5, < 1.5.0.10 | 1.5.0.10 |
| mozilla Firefox | >= 2.0, < 2.0.0.2 | 2.0.0.2 |
| mozilla seamonkey | < 1.0.8 | 1.0.8 |
| mozilla Thunderbird | < 1.5.0.10 | 1.5.0.10 |
| Canonical Ubuntu Linux | = 5.10 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
References
- FEDORA-2007-281 broken-link vendor-advisory
- FEDORA-2007-293 broken-link vendor-advisory
- FEDORA-2007-308 broken-link vendor-advisory
- FEDORA-2007-309 broken-link vendor-advisory
- HPSBUX02153 broken-link vendor-advisory
- SUSE-SA:2007:019 broken-link vendor-advisory
- RHSA-2007:0077 third-party-advisory vendor-advisory
- 24205 third-party-advisory
- 24238 third-party-advisory
- 24252 third-party-advisory
- 24287 third-party-advisory
- 24290 third-party-advisory
- 24293 third-party-advisory
- 24320 third-party-advisory
- 24328 third-party-advisory
- 24333 third-party-advisory
- 24342 third-party-advisory
- 24343 third-party-advisory
- 24384 third-party-advisory
- 24389 third-party-advisory
- 24393 third-party-advisory
- 24395 third-party-advisory
- 24406 third-party-advisory
- 24410 third-party-advisory
- 24437 third-party-advisory
- 24455 third-party-advisory
- 24456 third-party-advisory
- 24457 third-party-advisory
- 24522 third-party-advisory
- 24650 third-party-advisory
- GLSA-200703-04 third-party-advisory vendor-advisory
- GLSA-200703-18 third-party-advisory vendor-advisory
- SSA:2007-066-05 mailing-list third-party-advisory vendor-advisory
- SSA:2007-066-04 mailing-list third-party-advisory vendor-advisory
- SSA:2007-066-03 mailing-list third-party-advisory vendor-advisory
- GLSA-200703-08 third-party-advisory vendor-advisory
- VU#269484 third-party-advisory us-government-resource
- MDKSA-2007:050 third-party-advisory vendor-advisory
- MDKSA-2007:052 third-party-advisory vendor-advisory
- www.mozilla.org patch vendor-advisory
- SUSE-SA:2007:022 broken-link vendor-advisory
- 32115 broken-link vdb-entry
- RHSA-2007:0078 third-party-advisory vendor-advisory
- RHSA-2007:0079 third-party-advisory vendor-advisory
- RHSA-2007:0097 third-party-advisory vendor-advisory
- RHSA-2007:0108 third-party-advisory vendor-advisory
- 20070226 rPSA-2007-0040-1 firefox mailing-list third-party-advisory vdb-entry
- 20070303 rPSA-2007-0040-3 firefox thunderbird mailing-list third-party-advisory vdb-entry
- 22694 third-party-advisory vdb-entry
- 1017698 third-party-advisory vdb-entry
- USN-428-1 third-party-advisory vendor-advisory
- USN-431-1 third-party-advisory vendor-advisory
- ADV-2007-0718 third-party-advisory vdb-entry
- ADV-2007-0719 third-party-advisory vdb-entry
- ADV-2008-0083 third-party-advisory vdb-entry
- mozilla-multiple-javascript-code-execution(32699) third-party-advisory vdb-entry
- issues.rpath.com broken-link
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:11331 signature third-party-advisory vdb-entry