CVE-2007-0777 : Detail

CVE-2007-0777

42.76%V4
2007-02-26
19h00 +00:00
Overflow
Network
2024-08-07
12h34 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Metrics

Metrics Score Severity CVSS Vector Source
V2 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Mozilla>>Firefox >> Version From (including) 1.5 To (excluding) 1.5.0.10

Mozilla>>Firefox >> Version From (including) 2.0 To (excluding) 2.0.0.2

Mozilla>>Seamonkey >> Version To (excluding) 1.0.8

Mozilla>>Thunderbird >> Version To (excluding) 1.5.0.10

Configuraton 0

Canonical>>Ubuntu_linux >> Version 5.10

Canonical>>Ubuntu_linux >> Version 6.06

Canonical>>Ubuntu_linux >> Version 6.10

References

http://www.redhat.com/support/errata/RHSA-2007-0078.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/24395
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.kb.cert.org/vuls/id/269484
Tags : third-party-advisory, x_refsource_CERT-VN
http://fedoranews.org/cms/node/2747
Tags : vendor-advisory, x_refsource_FEDORA
http://secunia.com/advisories/24328
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0108.html
Tags : vendor-advisory, x_refsource_REDHAT
http://security.gentoo.org/glsa/glsa-200703-04.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://secunia.com/advisories/24252
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://secunia.com/advisories/24384
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24406
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24457
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:052
Tags : vendor-advisory, x_refsource_MANDRIVA
http://secunia.com/advisories/24343
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/0718
Tags : vdb-entry, x_refsource_VUPEN
http://fedoranews.org/cms/node/2749
Tags : vendor-advisory, x_refsource_FEDORA
http://security.gentoo.org/glsa/glsa-200703-18.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://secunia.com/advisories/24650
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-428-1
Tags : vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/24320
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/0083
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/24293
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24238
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24456
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24393
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24342
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24287
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24522
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/22694
Tags : vdb-entry, x_refsource_BID
http://www.osvdb.org/32115
Tags : vdb-entry, x_refsource_OSVDB
http://www.vupen.com/english/advisories/2007/0719
Tags : vdb-entry, x_refsource_VUPEN
http://fedoranews.org/cms/node/2713
Tags : vendor-advisory, x_refsource_FEDORA
http://www.ubuntu.com/usn/usn-431-1
Tags : vendor-advisory, x_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2007-0097.html
Tags : vendor-advisory, x_refsource_REDHAT
http://fedoranews.org/cms/node/2728
Tags : vendor-advisory, x_refsource_FEDORA
http://secunia.com/advisories/24205
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24389
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24410
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24333
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:050
Tags : vendor-advisory, x_refsource_MANDRIVA
http://secunia.com/advisories/24290
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24455
Tags : third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2007-0077.html
Tags : vendor-advisory, x_refsource_REDHAT
http://www.securitytracker.com/id?1017698
Tags : vdb-entry, x_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2007-0079.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/24437
Tags : third-party-advisory, x_refsource_SECUNIA