CVE-2007-2671 Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access...
HighCVSS 7.1
EPSS 3.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 2.0.0.3 | No fix listed |
References
- 20070501 Firefox 2.0.0.3 Out-of-bounds memory access via specialy crafted html file mailing-list
- 35700 vdb-entry
- 2704 third-party-advisory
- www.critical.lt exploit
- 23747 exploit vdb-entry
- firefox-href-dos(33982) vdb-entry