CVE-2007-1362

Published: Jun 1, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."

Affected (25)

Products: Mozilla: Firefox, Seamonkey

Mozilla

2 products

Firefox

Seamonkey

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.1.2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (72)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: cve@mitre.org

http://osvdb.org/35140

Source: cve@mitre.org

http://secunia.com/advisories/25476

Source: cve@mitre.org

http://secunia.com/advisories/25490

Source: cve@mitre.org

http://secunia.com/advisories/25533

Source: cve@mitre.org

http://secunia.com/advisories/25534

Source: cve@mitre.org

http://secunia.com/advisories/25559

Source: cve@mitre.org

http://secunia.com/advisories/25635

Source: cve@mitre.org

http://secunia.com/advisories/25647

Source: cve@mitre.org

http://secunia.com/advisories/25685

Source: cve@mitre.org

http://secunia.com/advisories/25750

Source: cve@mitre.org

http://secunia.com/advisories/25858

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200706-06.xml

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1300

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1306

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1308

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:120

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:126

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2007/mfsa2007-14.html

Source: cve@mitre.org

Patch

http://www.novell.com/linux/security/advisories/2007_36_mozilla.html

Source: cve@mitre.org

http://www.osvdb.org/35139

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0400.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0401.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0402.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/470172/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22879

Source: cve@mitre.org

http://www.securityfocus.com/bid/24242

Source: cve@mitre.org

http://www.securitytracker.com/id?1018162

Source: cve@mitre.org

http://www.securitytracker.com/id?1018163

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-468-1

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-151A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/1994

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34613

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1424

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10759

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742