CVE-2007-2869

Published: Jun 1, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in a submitted form.

Affected (16)

Products: Mozilla: Firefox

Mozilla

1 product

Firefox

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0

References (62)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

http://osvdb.org/35135

Source: secalert@redhat.com

http://secunia.com/advisories/25476

Source: secalert@redhat.com

http://secunia.com/advisories/25490

Source: secalert@redhat.com

http://secunia.com/advisories/25533

Source: secalert@redhat.com

http://secunia.com/advisories/25534

Source: secalert@redhat.com

http://secunia.com/advisories/25635

Source: secalert@redhat.com

http://secunia.com/advisories/25647

Source: secalert@redhat.com

http://secunia.com/advisories/25685

Source: secalert@redhat.com

http://secunia.com/advisories/25750

Source: secalert@redhat.com

http://secunia.com/advisories/25858

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200706-06.xml

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1306

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1308

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:120

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:126

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2007/mfsa2007-13.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2007_36_mozilla.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0400.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0401.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0402.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/470172/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/24242

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018154

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-468-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA07-151A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2007/1994

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/34612

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1424

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11208

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742