CVEvulnerability
CVE-2007-2867
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.
Affected configurations
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.1
• mozilla firefox 1.5.2
• mozilla firefox 1.5.3
• mozilla firefox 1.5.4
• mozilla firefox 1.5.5
• mozilla firefox 1.5.6
• mozilla firefox 1.5.7
• mozilla firefox 1.5.8
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.3
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1.2
• mozilla thunderbird 1.5
• mozilla thunderbird 1.5.0.1
• mozilla thunderbird 1.5.0.2
• mozilla thunderbird 1.5.0.3
• mozilla thunderbird 1.5.0.4
• mozilla thunderbird 1.5.0.6
• mozilla thunderbird 1.5.0.7
• mozilla thunderbird 1.5.0.8
• mozilla thunderbird 1.5.0.9
• mozilla thunderbird 1.5.0.10
• mozilla thunderbird 1.5.0.11
• mozilla thunderbird 1.5.1
• mozilla thunderbird 1.5.2
• mozilla thunderbird 2.0.0.0
• mozilla thunderbird 2.0.0.1
• mozilla thunderbird 2.0.0.2
• mozilla thunderbird 2.0.0.3
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://fedoranews.org/cms/node/2747 fedoranews.org
- http://fedoranews.org/cms/node/2749 fedoranews.org
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 h20000.www2.hp.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 h20000.www2.hp.com
- http://osvdb.org/35134 osvdb.org
- http://secunia.com/advisories/24406 secunia.com
- http://secunia.com/advisories/24456 secunia.com
- http://secunia.com/advisories/25469 secunia.com
- http://secunia.com/advisories/25476 secunia.com
- http://secunia.com/advisories/25488 secunia.com
- http://secunia.com/advisories/25489 secunia.com
- http://secunia.com/advisories/25490 secunia.com
- http://secunia.com/advisories/25491 secunia.com
- http://secunia.com/advisories/25492 secunia.com
- http://secunia.com/advisories/25496 secunia.com
- http://secunia.com/advisories/25533 secunia.com
- http://secunia.com/advisories/25534 secunia.com
- http://secunia.com/advisories/25559 secunia.com
- http://secunia.com/advisories/25635 secunia.com
- http://secunia.com/advisories/25644 secunia.com
- http://secunia.com/advisories/25647 secunia.com
- http://secunia.com/advisories/25664 secunia.com
- http://secunia.com/advisories/25685 secunia.com
- http://secunia.com/advisories/25750 secunia.com
- http://secunia.com/advisories/25858 secunia.com
- http://secunia.com/advisories/27423 secunia.com
- http://secunia.com/advisories/28363 secunia.com
- http://security.gentoo.org/glsa/glsa-200706-06.xml security.gentoo.org
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 slackware.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 slackware.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103136-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201532-1 sunsolve.sun.com
- http://www.debian.org/security/2007/dsa-1300 www.debian.org
- http://www.debian.org/security/2007/dsa-1305 www.debian.org
- http://www.debian.org/security/2007/dsa-1306 www.debian.org
- http://www.debian.org/security/2007/dsa-1308 www.debian.org
- http://www.kb.cert.org/vuls/id/751636 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:119 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:131 www.mandriva.com
- http://www.mozilla.org/security/announce/2007/mfsa2007-12.html Patch
- http://www.novell.com/linux/security/advisories/2007_36_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0400.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0401.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0402.html www.redhat.com
- http://www.securityfocus.com/archive/1/470172/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/471842/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24242 www.securityfocus.com
- http://www.securitytracker.com/id?1018151 www.securitytracker.com
- http://www.securitytracker.com/id?1018153 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-468-1 www.ubuntu.com
- http://www.ubuntu.com/usn/usn-469-1 www.ubuntu.com
- http://www.us-cert.gov/cas/techalerts/TA07-151A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/1994 www.vupen.com
- http://www.vupen.com/english/advisories/2007/3664 www.vupen.com
- http://www.vupen.com/english/advisories/2008/0082 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34604 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1424 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10066 oval.cisecurity.org
- http://fedoranews.org/cms/node/2747 fedoranews.org
- http://fedoranews.org/cms/node/2749 fedoranews.org
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 h20000.www2.hp.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 h20000.www2.hp.com
- http://osvdb.org/35134 osvdb.org
- http://secunia.com/advisories/24406 secunia.com
- http://secunia.com/advisories/24456 secunia.com
- http://secunia.com/advisories/25469 secunia.com
- http://secunia.com/advisories/25476 secunia.com
- http://secunia.com/advisories/25488 secunia.com
- http://secunia.com/advisories/25489 secunia.com
- http://secunia.com/advisories/25490 secunia.com
- http://secunia.com/advisories/25491 secunia.com
- http://secunia.com/advisories/25492 secunia.com
- http://secunia.com/advisories/25496 secunia.com
- http://secunia.com/advisories/25533 secunia.com
- http://secunia.com/advisories/25534 secunia.com
- http://secunia.com/advisories/25559 secunia.com
- http://secunia.com/advisories/25635 secunia.com
- http://secunia.com/advisories/25644 secunia.com