CVE-2007-0778

Published: Feb 26, 2007Modified: Apr 23, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache.

Affected (7)

Products: Mozilla: Firefox, Seamonkey · Canonical: Ubuntu Linux · Debian: Debian Linux

2 products

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	From 1.5 to 1.5.0.10
Mozilla Firefox	From 2.0 to 2.0.0.2
Mozilla Seamonkey	Before 1.0.8

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 5.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (100)

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2713

Source: secalert@redhat.com

Broken Link

http://fedoranews.org/cms/node/2728

Source: secalert@redhat.com

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

Broken Link

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html

Source: secalert@redhat.com

Broken Link

http://rhn.redhat.com/errata/RHSA-2007-0077.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24205

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24238

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24287

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24290

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24293

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24320

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24328

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24333

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24342

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24343

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24384

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24393

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24395

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24437

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24455

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24457

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/24650

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/25588

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200703-04.xml

Source: secalert@redhat.com

Third Party Advisory

http://securitytracker.com/id?1017699

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.debian.org/security/2007/dsa-1336

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:050

Source: secalert@redhat.com

Third Party Advisory

http://www.mozilla.org/security/announce/2007/mfsa2007-03.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2007_22_mozilla.html

Source: secalert@redhat.com

Broken Link

http://www.osvdb.org/32110

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0078.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0079.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0097.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0108.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/461336/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/461809/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/22694

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-428-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/0718

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=347852

Source: secalert@redhat.com

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/32671

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-1081

Source: secalert@redhat.com

Broken Link

https://issues.rpath.com/browse/RPL-1103

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9151

Source: secalert@redhat.com

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc (unsafe URL)