CVEvulnerability
CVE-2007-0778
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-02-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.4 MEDIUM — AV:N/AC:H/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-200
Description
The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache.
Affected configurations
• mozilla firefox (>= 1.5 < 1.5.0.10)
• mozilla firefox (>= 2.0 < 2.0.0.2)
• mozilla seamonkey (< 1.0.8)
• canonical ubuntu linux 5.10
• canonical ubuntu linux 6.06
• canonical ubuntu linux 6.10
• debian debian linux 3.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc Broken Link
- ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc Broken Link
- http://fedoranews.org/cms/node/2713 Broken Link
- http://fedoranews.org/cms/node/2728 Broken Link
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2007-0077.html Third Party Advisory
- http://secunia.com/advisories/24205 Third Party Advisory
- http://secunia.com/advisories/24238 Third Party Advisory
- http://secunia.com/advisories/24287 Third Party Advisory
- http://secunia.com/advisories/24290 Third Party Advisory
- http://secunia.com/advisories/24293 Third Party Advisory
- http://secunia.com/advisories/24320 Third Party Advisory
- http://secunia.com/advisories/24328 Third Party Advisory
- http://secunia.com/advisories/24333 Third Party Advisory
- http://secunia.com/advisories/24342 Third Party Advisory
- http://secunia.com/advisories/24343 Third Party Advisory
- http://secunia.com/advisories/24384 Third Party Advisory
- http://secunia.com/advisories/24393 Third Party Advisory
- http://secunia.com/advisories/24395 Third Party Advisory
- http://secunia.com/advisories/24437 Third Party Advisory
- http://secunia.com/advisories/24455 Third Party Advisory
- http://secunia.com/advisories/24457 Third Party Advisory
- http://secunia.com/advisories/24650 Third Party Advisory
- http://secunia.com/advisories/25588 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200703-04.xml Third Party Advisory
- http://securitytracker.com/id?1017699 Third Party Advisory, VDB Entry
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 Mailing List, Third Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 Mailing List, Third Party Advisory
- http://www.debian.org/security/2007/dsa-1336 Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 Third Party Advisory
- http://www.mozilla.org/security/announce/2007/mfsa2007-03.html Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2007_22_mozilla.html Broken Link
- http://www.osvdb.org/32110 Broken Link
- http://www.redhat.com/support/errata/RHSA-2007-0078.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0079.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0097.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0108.html Third Party Advisory
- http://www.securityfocus.com/archive/1/461336/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/461809/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/22694 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-428-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2007/0718 Third Party Advisory
- http://www.vupen.com/english/advisories/2008/0083 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=347852 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32671 Third Party Advisory, VDB Entry
- https://issues.rpath.com/browse/RPL-1081 Broken Link
- https://issues.rpath.com/browse/RPL-1103 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9151 Broken Link
- ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc Broken Link
- ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc Broken Link
- http://fedoranews.org/cms/node/2713 Broken Link
- http://fedoranews.org/cms/node/2728 Broken Link
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2007-0077.html Third Party Advisory
- http://secunia.com/advisories/24205 Third Party Advisory
- http://secunia.com/advisories/24238 Third Party Advisory
- http://secunia.com/advisories/24287 Third Party Advisory
- http://secunia.com/advisories/24290 Third Party Advisory
- http://secunia.com/advisories/24293 Third Party Advisory
- http://secunia.com/advisories/24320 Third Party Advisory
- http://secunia.com/advisories/24328 Third Party Advisory
- http://secunia.com/advisories/24333 Third Party Advisory
- http://secunia.com/advisories/24342 Third Party Advisory
- http://secunia.com/advisories/24343 Third Party Advisory
- http://secunia.com/advisories/24384 Third Party Advisory
- http://secunia.com/advisories/24393 Third Party Advisory
- http://secunia.com/advisories/24395 Third Party Advisory
- http://secunia.com/advisories/24437 Third Party Advisory
- http://secunia.com/advisories/24455 Third Party Advisory
- http://secunia.com/advisories/24457 Third Party Advisory
- http://secunia.com/advisories/24650 Third Party Advisory
- http://secunia.com/advisories/25588 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200703-04.xml Third Party Advisory
- http://securitytracker.com/id?1017699 Third Party Advisory, VDB Entry
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 Mailing List, Third Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 Mailing List, Third Party Advisory
- http://www.debian.org/security/2007/dsa-1336 Third Party Advisory