CVE-2007-5340

Published: Oct 21, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption.

Affected (3)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.7
Mozilla Seamonkey	Up to 1.1.4
Mozilla Thunderbird	Up to 2.0.0.6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (142)

http://bugs.gentoo.org/show_bug.cgi?id=196481

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579

Source: secalert@redhat.com

http://secunia.com/advisories/27276

Source: secalert@redhat.com

http://secunia.com/advisories/27298

Source: secalert@redhat.com

http://secunia.com/advisories/27311

Source: secalert@redhat.com

http://secunia.com/advisories/27313

Source: secalert@redhat.com

http://secunia.com/advisories/27315

Source: secalert@redhat.com

http://secunia.com/advisories/27325

Source: secalert@redhat.com

http://secunia.com/advisories/27326

Source: secalert@redhat.com

http://secunia.com/advisories/27327

Source: secalert@redhat.com

http://secunia.com/advisories/27335

Source: secalert@redhat.com

http://secunia.com/advisories/27336

Source: secalert@redhat.com

http://secunia.com/advisories/27356

Source: secalert@redhat.com

http://secunia.com/advisories/27360

Source: secalert@redhat.com

http://secunia.com/advisories/27383

Source: secalert@redhat.com

http://secunia.com/advisories/27387

Source: secalert@redhat.com

http://secunia.com/advisories/27403

Source: secalert@redhat.com

http://secunia.com/advisories/27414

Source: secalert@redhat.com

http://secunia.com/advisories/27425

Source: secalert@redhat.com

http://secunia.com/advisories/27480

Source: secalert@redhat.com

http://secunia.com/advisories/27665

Source: secalert@redhat.com

http://secunia.com/advisories/27680

Source: secalert@redhat.com

http://secunia.com/advisories/27704

Source: secalert@redhat.com

http://secunia.com/advisories/28179

Source: secalert@redhat.com

http://secunia.com/advisories/28363

Source: secalert@redhat.com

http://secunia.com/advisories/28398

Source: secalert@redhat.com

http://secunia.com/advisories/28636

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200711-24.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1018834

Source: secalert@redhat.com

http://securitytracker.com/id?1018835

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1

Source: secalert@redhat.com

http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1391

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1392

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1396

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1401

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/755513

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2007:047

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:047

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2007/mfsa2007-29.html

Source: secalert@redhat.com

Patch

http://www.novell.com/linux/security/advisories/2007_57_mozilla.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/suse_security_summary_report.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0979.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0980.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0981.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/482876/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/482925/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/482932/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26132

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-536-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3544

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3545

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3587

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/4272

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0082

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0643

Source: secalert@redhat.com

https://bugzilla.mozilla.org/buglist.cgi?bug_id=372309%2C387955%2C390078%2C393537

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/37282

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1858

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1884

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9622

Source: secalert@redhat.com

https://usn.ubuntu.com/535-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=196481