VulnerabilityModified

CVE-2007-0777

The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors…

HIGH 9.3EPSS 7.56%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (7.56%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 7.56% probability · 94th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: mozilla/firefox · mozilla/seamonkey · mozilla/thunderbird · canonical/ubuntu linux
Source: secalert@redhat.com

References

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.ascBroken Link
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.ascBroken Link
http://fedoranews.org/cms/node/2713Broken Link
http://fedoranews.org/cms/node/2728Broken Link
http://fedoranews.org/cms/node/2747Broken Link
http://fedoranews.org/cms/node/2749Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742Broken Link
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.htmlBroken Link
http://rhn.redhat.com/errata/RHSA-2007-0077.htmlThird Party Advisory
http://secunia.com/advisories/24205Third Party Advisory
http://secunia.com/advisories/24238Third Party Advisory
http://secunia.com/advisories/24252Third Party Advisory
http://secunia.com/advisories/24287Third Party Advisory
http://secunia.com/advisories/24290Third Party Advisory
http://secunia.com/advisories/24293Third Party Advisory
http://secunia.com/advisories/24320Third Party Advisory
http://secunia.com/advisories/24328Third Party Advisory
http://secunia.com/advisories/24333Third Party Advisory
http://secunia.com/advisories/24342Third Party Advisory
http://secunia.com/advisories/24343Third Party Advisory
http://secunia.com/advisories/24384Third Party Advisory
http://secunia.com/advisories/24389Third Party Advisory
http://secunia.com/advisories/24393Third Party Advisory
http://secunia.com/advisories/24395Third Party Advisory
http://secunia.com/advisories/24406Third Party Advisory
http://secunia.com/advisories/24410Third Party Advisory
http://secunia.com/advisories/24437Third Party Advisory
http://secunia.com/advisories/24455Third Party Advisory
http://secunia.com/advisories/24456Third Party Advisory
http://secunia.com/advisories/24457Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.