CVE-2007-2868
Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.87%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 4.87% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- mozilla/firefox · mozilla/seamonkey · mozilla/thunderbird
- Source
- secalert@redhat.com
References
- http://fedoranews.org/cms/node/2747
- http://fedoranews.org/cms/node/2749
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579
- http://osvdb.org/35138
- http://secunia.com/advisories/24406Vendor Advisory
- http://secunia.com/advisories/24456Vendor Advisory
- http://secunia.com/advisories/25469Vendor Advisory
- http://secunia.com/advisories/25476Vendor Advisory
- http://secunia.com/advisories/25488Vendor Advisory
- http://secunia.com/advisories/25489Vendor Advisory
- http://secunia.com/advisories/25490Vendor Advisory
- http://secunia.com/advisories/25491Vendor Advisory
- http://secunia.com/advisories/25492Vendor Advisory
- http://secunia.com/advisories/25496Vendor Advisory
- http://secunia.com/advisories/25533Vendor Advisory
- http://secunia.com/advisories/25534Vendor Advisory
- http://secunia.com/advisories/25559Vendor Advisory
- http://secunia.com/advisories/25635Vendor Advisory
- http://secunia.com/advisories/25644Vendor Advisory
- http://secunia.com/advisories/25647Vendor Advisory
- http://secunia.com/advisories/25664Vendor Advisory
- http://secunia.com/advisories/25685Vendor Advisory
- http://secunia.com/advisories/25750Vendor Advisory
- http://secunia.com/advisories/25858
- http://secunia.com/advisories/27427
- http://secunia.com/advisories/28363
- http://security.gentoo.org/glsa/glsa-200706-06.xml
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.