[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-2868Date: (C)2007-05-31   (M)2023-12-22


Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1018151
SECTRACK-1018152
SECTRACK-1018153
SUNALERT-103125
http://www.securityfocus.com/archive/1/470172/100/200/threaded
http://www.securityfocus.com/archive/1/471842/100/0/threaded
SUNALERT-201505
BID-24242
SECUNIA-24406
SECUNIA-24456
SECUNIA-25469
SECUNIA-25476
SECUNIA-25488
SECUNIA-25489
SECUNIA-25490
SECUNIA-25491
SECUNIA-25492
SECUNIA-25496
SECUNIA-25533
SECUNIA-25534
SECUNIA-25559
SECUNIA-25635
SECUNIA-25644
SECUNIA-25647
SECUNIA-25664
SECUNIA-25685
SECUNIA-25750
SECUNIA-25858
SECUNIA-27427
SECUNIA-28363
OSVDB-35138
ADV-2007-1994
ADV-2007-3632
ADV-2008-0082
DSA-1300
DSA-1305
DSA-1306
DSA-1308
FEDORA-2007-308
FEDORA-2007-309
GLSA-200706-06
HPSBUX02153
HPSBUX02156
MDKSA-2007:119
MDKSA-2007:120
MDKSA-2007:131
RHSA-2007:0400
RHSA-2007:0401
RHSA-2007:0402
SSA:2007-066-04
SSA:2007-152-02
SUSE-SA:2007:036
TA07-151A
USN-468-1
USN-469-1
VU#609956
http://www.mozilla.org/security/announce/2007/mfsa2007-12.html
https://issues.rpath.com/browse/RPL-1424
mozilla-javascripteng-code-execution(34605)
oval:org.mitre.oval:def:10711

CPE    33
cpe:/a:mozilla:firefox:1.5.0.10
cpe:/a:mozilla:firefox:1.5.0.11
cpe:/a:mozilla:firefox:1.5.0.4
cpe:/a:mozilla:firefox:1.5.0.3
...
CWE    1
CWE-94

© SecPod Technologies