Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-0775

Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via certain vectors.

Published

2007-02-26T19:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 3.7 (LOW)

CVSSv2 Vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

1.9

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mozilla	firefox	1.0	Yes
Application	mozilla	firefox	1.0.1	Yes
Application	mozilla	firefox	1.0.2	Yes
Application	mozilla	firefox	1.0.3	Yes
Application	mozilla	firefox	1.0.4	Yes
Application	mozilla	firefox	1.0.5	Yes
Application	mozilla	firefox	1.0.6	Yes
Application	mozilla	firefox	1.0.6	Yes
Application	mozilla	firefox	1.0.7	Yes
Application	mozilla	firefox	1.0.8	Yes
Application	mozilla	firefox	1.5	Yes
Application	mozilla	firefox	1.5	Yes
Application	mozilla	firefox	1.5	Yes
Application	mozilla	firefox	1.5.0.1	Yes
Application	mozilla	firefox	1.5.0.2	Yes
Application	mozilla	firefox	1.5.0.3	Yes
Application	mozilla	firefox	1.5.0.4	Yes
Application	mozilla	firefox	1.5.0.5	Yes
Application	mozilla	firefox	1.5.0.6	Yes
Application	mozilla	firefox	1.5.0.7	Yes
Application	mozilla	firefox	1.5.0.8	Yes
Application	mozilla	firefox	1.5.0.9	Yes
Application	mozilla	firefox	2.0	Yes
Application	mozilla	firefox	2.0	Yes
Application	mozilla	firefox	2.0	Yes
Application	mozilla	firefox	2.0	Yes
Application	mozilla	firefox	2.0.0.1	Yes
Application	mozilla	seamonkey	1.0	Yes
Application	mozilla	seamonkey	1.0	Yes
Application	mozilla	seamonkey	1.0	Yes
Application	mozilla	seamonkey	1.0.1	Yes
Application	mozilla	seamonkey	1.0.2	Yes
Application	mozilla	seamonkey	1.0.3	Yes
Application	mozilla	seamonkey	1.0.4	Yes
Application	mozilla	seamonkey	1.0.5	Yes
Application	mozilla	seamonkey	1.0.6	Yes
Application	mozilla	seamonkey	1.0.7	Yes
Application	mozilla	thunderbird	1.0.3	Yes
Application	mozilla	thunderbird	1.0.4	Yes
Application	mozilla	thunderbird	1.0.5	Yes
Application	mozilla	thunderbird	1.0.6	Yes
Application	mozilla	thunderbird	1.0.7	Yes
Application	mozilla	thunderbird	1.0.8	Yes
Application	mozilla	thunderbird	1.5	Yes

References

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc ([email protected])
http://fedoranews.org/cms/node/2713 ([email protected])
http://fedoranews.org/cms/node/2728 ([email protected])
http://fedoranews.org/cms/node/2747 ([email protected])
http://fedoranews.org/cms/node/2749 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 ([email protected])
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html ([email protected])
http://rhn.redhat.com/errata/RHSA-2007-0077.html Vendor Advisory ([email protected])
http://secunia.com/advisories/24205 Vendor Advisory ([email protected])
http://secunia.com/advisories/24238 Vendor Advisory ([email protected])
http://secunia.com/advisories/24252 Vendor Advisory ([email protected])
http://secunia.com/advisories/24287 Vendor Advisory ([email protected])
http://secunia.com/advisories/24290 Vendor Advisory ([email protected])
http://secunia.com/advisories/24293 Vendor Advisory ([email protected])
http://secunia.com/advisories/24320 Vendor Advisory ([email protected])
http://secunia.com/advisories/24328 Vendor Advisory ([email protected])
http://secunia.com/advisories/24333 Vendor Advisory ([email protected])
http://secunia.com/advisories/24342 ([email protected])
http://secunia.com/advisories/24343 Vendor Advisory ([email protected])
http://secunia.com/advisories/24384 Vendor Advisory ([email protected])
http://secunia.com/advisories/24389 Vendor Advisory ([email protected])
http://secunia.com/advisories/24393 Vendor Advisory ([email protected])
http://secunia.com/advisories/24395 Vendor Advisory ([email protected])
http://secunia.com/advisories/24406 ([email protected])
http://secunia.com/advisories/24410 Vendor Advisory ([email protected])
http://secunia.com/advisories/24437 Vendor Advisory ([email protected])
http://secunia.com/advisories/24455 ([email protected])
http://secunia.com/advisories/24456 ([email protected])
http://secunia.com/advisories/24457 ([email protected])
http://secunia.com/advisories/24522 Vendor Advisory ([email protected])
http://secunia.com/advisories/24650 Vendor Advisory ([email protected])
http://secunia.com/advisories/25588 ([email protected])
http://security.gentoo.org/glsa/glsa-200703-04.xml ([email protected])
http://security.gentoo.org/glsa/glsa-200703-18.xml ([email protected])
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 ([email protected])
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 ([email protected])
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 ([email protected])
http://www.debian.org/security/2007/dsa-1336 ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml ([email protected])
http://www.kb.cert.org/vuls/id/761756 US Government Resource ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2007:052 ([email protected])
http://www.mozilla.org/security/announce/2007/mfsa2007-01.html Patch, Vendor Advisory ([email protected])
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html ([email protected])
http://www.osvdb.org/32114 ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0078.html Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0079.html Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0097.html Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0108.html Vendor Advisory ([email protected])
http://www.securityfocus.com/archive/1/461336/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/461809/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/22694 ([email protected])
http://www.securitytracker.com/id?1017698 ([email protected])
http://www.ubuntu.com/usn/usn-428-1 ([email protected])
http://www.ubuntu.com/usn/usn-431-1 ([email protected])
http://www.vupen.com/english/advisories/2007/0718 ([email protected])
http://www.vupen.com/english/advisories/2007/0719 ([email protected])
http://www.vupen.com/english/advisories/2008/0083 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/32704 ([email protected])
https://issues.rpath.com/browse/RPL-1081 ([email protected])
https://issues.rpath.com/browse/RPL-1103 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10012 ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc (af854a3a-2127-422b-91ae-364da2661108)
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc (af854a3a-2127-422b-91ae-364da2661108)
http://fedoranews.org/cms/node/2713 (af854a3a-2127-422b-91ae-364da2661108)
http://fedoranews.org/cms/node/2728 (af854a3a-2127-422b-91ae-364da2661108)
http://fedoranews.org/cms/node/2747 (af854a3a-2127-422b-91ae-364da2661108)
http://fedoranews.org/cms/node/2749 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (af854a3a-2127-422b-91ae-364da2661108)
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2007-0077.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24205 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24238 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24252 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24287 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24290 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24293 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24320 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24328 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24333 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24342 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24343 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24384 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24389 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24393 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24395 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24406 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24410 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24437 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24455 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24456 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24457 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24522 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24650 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25588 (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200703-04.xml (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200703-18.xml (af854a3a-2127-422b-91ae-364da2661108)
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 (af854a3a-2127-422b-91ae-364da2661108)
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 (af854a3a-2127-422b-91ae-364da2661108)
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2007/dsa-1336 (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/761756 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2007:052 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/2007/mfsa2007-01.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/32114 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0078.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0079.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0097.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0108.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/461336/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/461809/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/22694 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1017698 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-428-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-431-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0718 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0719 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0083 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/32704 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-1081 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-1103 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10012 (af854a3a-2127-422b-91ae-364da2661108)