CVE-2007-0009

Published: Feb 26, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.

Affected (10)

Products: Mozilla: Firefox, Network Security Services, Seamonkey, Thunderbird · Debian: Debian Linux · Canonical: Ubuntu Linux

Mozilla

4 products

Firefox

Network Security Services

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	From 1.5 to 1.5.0.10
Mozilla Firefox	From 2.0 to 2.0.0.2
Mozilla Network Security Services	Before 3.11.5
Mozilla Seamonkey	Before 1.0.8
Mozilla Thunderbird	Before 1.5.0.10

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 5.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (132)

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2709

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2711

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2747

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2749

Source: secalert@redhat.com

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

Broken Link

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=483

Source: secalert@redhat.com

Broken Link

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html

Source: secalert@redhat.com

Broken Link

http://rhn.redhat.com/errata/RHSA-2007-0077.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24253

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24277

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24287

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24290

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24293

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24333

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24342

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24343

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24384

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24389

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24395

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24406

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24410

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24455

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24456

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24457

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24522

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24562

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24650

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24703

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/25588

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/25597

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200703-18.xml

Source: secalert@redhat.com

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102856-1

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102945-1

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2007/dsa-1336

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200703-22.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.kb.cert.org/vuls/id/592796

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:050

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:052

Source: secalert@redhat.com

Third Party Advisory

http://www.mozilla.org/security/announce/2007/mfsa2007-06.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2007_22_mozilla.html

Source: secalert@redhat.com

Broken Link

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Source: secalert@redhat.com

Third Party Advisory

http://www.osvdb.org/32106

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0078.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0079.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0097.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0108.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/461336/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/461809/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/64758

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1017696

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-428-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/usn-431-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/0718

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/0719

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/1165

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/2141

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=364323

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32663

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-1081

Source: secalert@redhat.com

Broken Link

https://issues.rpath.com/browse/RPL-1103

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10174

Source: secalert@redhat.com

Third Party Advisory

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc (unsafe URL)