CVE-2007-2868

Published: Jun 1, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.

Affected (33)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.1.2
Mozilla Thunderbird	Version 1.5.0.10
Mozilla Thunderbird	Version 1.5.0.11
Mozilla Thunderbird	Version 1.5.0.1
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.3
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.0.6
Mozilla Thunderbird	Version 1.5.0.7
Mozilla Thunderbird	Version 1.5.0.8
Mozilla Thunderbird	Version 1.5.0.9
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 2.0.0.0
Mozilla Thunderbird	Version 2.0.0.1
Mozilla Thunderbird	Version 2.0.0.2
Mozilla Thunderbird	Version 2.0.0.3

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (120)

http://fedoranews.org/cms/node/2747

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2749

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579

Source: secalert@redhat.com

http://osvdb.org/35138

Source: secalert@redhat.com

http://secunia.com/advisories/24406

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24456

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25469

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25476

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25488

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25489

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25490

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25491

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25492

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25496

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25533

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25534

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25559

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25635

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25644

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25647

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25664

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25685

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25750

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25858

Source: secalert@redhat.com

http://secunia.com/advisories/27427

Source: secalert@redhat.com

http://secunia.com/advisories/28363

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200706-06.xml

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103125-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201505-1

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1300

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1305

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1306

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1308

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/609956

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:119

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:120

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:131

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2007/mfsa2007-12.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2007_36_mozilla.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0400.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0401.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0402.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/470172/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/471842/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/24242

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018151

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018152

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018153

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-468-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-469-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA07-151A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2007/1994

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3632

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0082

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/34605

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1424

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10711

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2747