critical9.3
CVE-2007-0777
The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attacker…
Impact
The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | from 1.5 before 1.5.0.10 from 2.0 before 2.0.0.2 |
| Mozilla | Seamonkey | before 1.0.8 |
| Mozilla | Thunderbird | before 1.5.0.10 |
| Canonical | Ubuntu Linux | Versions 5.10, 6.06, 6.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://fedoranews.org/cms/node/2713
- http://fedoranews.org/cms/node/2728
- http://fedoranews.org/cms/node/2747
- http://fedoranews.org/cms/node/2749
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
- http://rhn.redhat.com/errata/RHSA-2007-0077.html
- http://secunia.com/advisories/24205
- http://secunia.com/advisories/24238
- http://secunia.com/advisories/24252
- http://secunia.com/advisories/24287
- http://secunia.com/advisories/24290
- http://secunia.com/advisories/24293
- http://secunia.com/advisories/24320
- http://secunia.com/advisories/24328
- http://secunia.com/advisories/24333
- http://secunia.com/advisories/24342
- http://secunia.com/advisories/24343
- http://secunia.com/advisories/24384
- http://secunia.com/advisories/24389
- http://secunia.com/advisories/24393
- http://secunia.com/advisories/24395
- http://secunia.com/advisories/24406
- http://secunia.com/advisories/24410
- http://secunia.com/advisories/24437