CVE-2007-2867 Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2....
HighCVSS 9.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 1.5 | No fix listed |
| mozilla Firefox | = 1.5.0.1 | No fix listed |
| mozilla Firefox | = 1.5.0.2 | No fix listed |
| mozilla Firefox | = 1.5.0.3 | No fix listed |
| mozilla Firefox | = 1.5.0.4 | No fix listed |
| mozilla Firefox | = 1.5.0.5 | No fix listed |
| mozilla Firefox | = 1.5.0.6 | No fix listed |
| mozilla Firefox | = 1.5.0.7 | No fix listed |
| mozilla Firefox | = 1.5.0.8 | No fix listed |
| mozilla Firefox | = 1.5.0.9 | No fix listed |
| mozilla Firefox | = 1.5.0.10 | No fix listed |
| mozilla Firefox | = 1.5.0.11 | No fix listed |
| mozilla Firefox | = 1.5.1 | No fix listed |
| mozilla Firefox | = 1.5.2 | No fix listed |
| mozilla Firefox | = 1.5.3 | No fix listed |
| mozilla Firefox | = 1.5.4 | No fix listed |
| mozilla Firefox | = 1.5.5 | No fix listed |
| mozilla Firefox | = 1.5.6 | No fix listed |
| mozilla Firefox | = 1.5.7 | No fix listed |
| mozilla Firefox | = 1.5.8 | No fix listed |
| mozilla Firefox | = 2.0 | No fix listed |
| mozilla Firefox | = 2.0.0.1 | No fix listed |
| mozilla Firefox | = 2.0.0.2 | No fix listed |
| mozilla Firefox | = 2.0.0.3 | No fix listed |
| mozilla seamonkey | = 1.0.3 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla seamonkey | = 1.0.4 | No fix listed |
| mozilla seamonkey | = 1.0.9 | No fix listed |
| mozilla seamonkey | = 1.1.2 | No fix listed |
| mozilla Thunderbird | = 1.5 | No fix listed |
| mozilla Thunderbird | = 1.5.0.1 | No fix listed |
| mozilla Thunderbird | = 1.5.0.2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.3 | No fix listed |
| mozilla Thunderbird | = 1.5.0.4 | No fix listed |
| mozilla Thunderbird | = 1.5.0.6 | No fix listed |
| mozilla Thunderbird | = 1.5.0.7 | No fix listed |
| mozilla Thunderbird | = 1.5.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5.0.9 | No fix listed |
| mozilla Thunderbird | = 1.5.0.10 | No fix listed |
| mozilla Thunderbird | = 1.5.0.11 | No fix listed |
| mozilla Thunderbird | = 1.5.1 | No fix listed |
| mozilla Thunderbird | = 1.5.2 | No fix listed |
| mozilla Thunderbird | = 2.0.0.0 | No fix listed |
| mozilla Thunderbird | = 2.0.0.1 | No fix listed |
| mozilla Thunderbird | = 2.0.0.2 | No fix listed |
| mozilla Thunderbird | = 2.0.0.3 | No fix listed |
References
- FEDORA-2007-308 vendor-advisory
- FEDORA-2007-309 vendor-advisory
- HPSBUX02153 vendor-advisory
- HPSBUX02156 vendor-advisory
- 35134 vdb-entry
- 24406 third-party-advisory
- 24456 third-party-advisory
- 25469 third-party-advisory
- 25476 third-party-advisory
- 25488 third-party-advisory
- 25489 third-party-advisory
- 25490 third-party-advisory
- 25491 third-party-advisory
- 25492 third-party-advisory
- 25496 third-party-advisory
- 25533 third-party-advisory
- 25534 third-party-advisory
- 25559 third-party-advisory
- 25635 third-party-advisory
- 25644 third-party-advisory
- 25647 third-party-advisory
- 25664 third-party-advisory
- 25685 third-party-advisory
- 25750 third-party-advisory
- 25858 third-party-advisory
- 27423 third-party-advisory
- 28363 third-party-advisory
- GLSA-200706-06 vendor-advisory
- SSA:2007-066-04 vendor-advisory
- SSA:2007-152-02 vendor-advisory
- 103136 vendor-advisory
- 201532 vendor-advisory
- DSA-1300 vendor-advisory
- DSA-1305 vendor-advisory
- DSA-1306 vendor-advisory
- DSA-1308 vendor-advisory
- VU#751636 third-party-advisory us-government-resource
- MDKSA-2007:119 vendor-advisory
- MDKSA-2007:120 vendor-advisory
- MDKSA-2007:126 vendor-advisory
- MDKSA-2007:131 vendor-advisory
- www.mozilla.org patch
- SUSE-SA:2007:036 vendor-advisory
- RHSA-2007:0400 vendor-advisory
- RHSA-2007:0401 vendor-advisory
- RHSA-2007:0402 vendor-advisory
- 20070531 FLEA-2007-0023-1: firefox mailing-list
- 20070620 FLEA-2007-0027-1: thunderbird mailing-list
- 24242 vdb-entry
- 1018151 vdb-entry
- 1018153 vdb-entry
- USN-468-1 vendor-advisory
- USN-469-1 vendor-advisory
- TA07-151A third-party-advisory us-government-resource
- ADV-2007-1994 vdb-entry
- ADV-2007-3664 vdb-entry
- ADV-2008-0082 vdb-entry
- mozilla-layoutengine-dos(34604) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10066 signature vdb-entry