CVE-2007-2867

Published: Jun 1, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.

Affected (45)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.1.2
Mozilla Thunderbird	Version 1.5.0.10
Mozilla Thunderbird	Version 1.5.0.11
Mozilla Thunderbird	Version 1.5.0.1
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.3
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.0.6
Mozilla Thunderbird	Version 1.5.0.7
Mozilla Thunderbird	Version 1.5.0.8
Mozilla Thunderbird	Version 1.5.0.9
Mozilla Thunderbird	Version 1.5.1
Mozilla Thunderbird	Version 1.5.2
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 2.0.0.0
Mozilla Thunderbird	Version 2.0.0.1
Mozilla Thunderbird	Version 2.0.0.2
Mozilla Thunderbird	Version 2.0.0.3

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (120)

http://fedoranews.org/cms/node/2747

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2749

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579

Source: secalert@redhat.com

http://osvdb.org/35134

Source: secalert@redhat.com

http://secunia.com/advisories/24406

Source: secalert@redhat.com

http://secunia.com/advisories/24456

Source: secalert@redhat.com

http://secunia.com/advisories/25469

Source: secalert@redhat.com

http://secunia.com/advisories/25476

Source: secalert@redhat.com

http://secunia.com/advisories/25488

Source: secalert@redhat.com

http://secunia.com/advisories/25489

Source: secalert@redhat.com

http://secunia.com/advisories/25490

Source: secalert@redhat.com

http://secunia.com/advisories/25491

Source: secalert@redhat.com

http://secunia.com/advisories/25492

Source: secalert@redhat.com

http://secunia.com/advisories/25496

Source: secalert@redhat.com

http://secunia.com/advisories/25533

Source: secalert@redhat.com

http://secunia.com/advisories/25534

Source: secalert@redhat.com

http://secunia.com/advisories/25559

Source: secalert@redhat.com

http://secunia.com/advisories/25635

Source: secalert@redhat.com

http://secunia.com/advisories/25644

Source: secalert@redhat.com

http://secunia.com/advisories/25647

Source: secalert@redhat.com

http://secunia.com/advisories/25664

Source: secalert@redhat.com

http://secunia.com/advisories/25685

Source: secalert@redhat.com

http://secunia.com/advisories/25750

Source: secalert@redhat.com

http://secunia.com/advisories/25858

Source: secalert@redhat.com

http://secunia.com/advisories/27423

Source: secalert@redhat.com

http://secunia.com/advisories/28363

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200706-06.xml

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103136-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201532-1

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1300

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1305

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1306

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1308

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/751636

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:119

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:120

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:126

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:131

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2007/mfsa2007-12.html

Source: secalert@redhat.com

Patch

http://www.novell.com/linux/security/advisories/2007_36_mozilla.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0400.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0401.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0402.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/470172/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/471842/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/24242

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018151

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018153

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-468-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-469-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA07-151A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2007/1994

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3664

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0082

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/34604

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1424

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10066

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2747