CVE-2007-5340

CVSS V2 Medium 4.3 CVSS V3 None
Description
Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption.
Overview
  • CVE ID
  • CVE-2007-5340
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2007-10-21T19:17:00
  • Last Modified Date
  • 2023-02-13T02:18:25
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* 1 OR 2.0.0.7
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* 1 OR 1.1.4
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* 1 OR 2.0.0.6
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:N/I:N/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 4.3
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
https://bugzilla.mozilla.org/buglist.cgi?bug_id=372309,387955,390078,393537
http://www.mozilla.org/security/announce/2007/mfsa2007-29.html Patch
https://issues.rpath.com/browse/RPL-1858
https://issues.rpath.com/browse/RPL-1884
http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
http://bugs.gentoo.org/show_bug.cgi?id=196481
http://www.debian.org/security/2007/dsa-1396
http://www.debian.org/security/2007/dsa-1401
http://www.debian.org/security/2007/dsa-1391
http://www.debian.org/security/2007/dsa-1392
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html
http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
http://security.gentoo.org/glsa/glsa-200711-24.xml
http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202
http://www.redhat.com/support/errata/RHSA-2007-0979.html
http://www.redhat.com/support/errata/RHSA-2007-0980.html
http://www.redhat.com/support/errata/RHSA-2007-0981.html
http://www.novell.com/linux/security/advisories/2007_57_mozilla.html
http://www.ubuntu.com/usn/usn-536-1
http://www.kb.cert.org/vuls/id/755513 US Government Resource
http://www.securityfocus.com/bid/26132
http://securitytracker.com/id?1018834
http://securitytracker.com/id?1018835
http://secunia.com/advisories/27276
http://secunia.com/advisories/27325
http://secunia.com/advisories/27327
http://secunia.com/advisories/27335
http://secunia.com/advisories/27356
http://secunia.com/advisories/27383
http://secunia.com/advisories/27425
http://secunia.com/advisories/27403
http://secunia.com/advisories/27480
http://secunia.com/advisories/27387
http://secunia.com/advisories/27298
http://secunia.com/advisories/27311
http://secunia.com/advisories/27313
http://secunia.com/advisories/27315
http://secunia.com/advisories/27326
http://secunia.com/advisories/27336
http://secunia.com/advisories/27665
http://secunia.com/advisories/27704
http://secunia.com/advisories/27414
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html
http://secunia.com/advisories/27680
http://secunia.com/advisories/28179
http://secunia.com/advisories/27360
http://secunia.com/advisories/28363
http://secunia.com/advisories/28398
http://www.novell.com/linux/security/advisories/suse_security_summary_report.html
http://secunia.com/advisories/28636
http://www.mandriva.com/security/advisories?name=MDVSA-2007:047
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1
http://www.mandriva.com/security/advisories?name=MDVSA-2008:047
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1
http://www.vupen.com/english/advisories/2007/4272
http://www.vupen.com/english/advisories/2007/3544
http://www.vupen.com/english/advisories/2008/0082
http://www.vupen.com/english/advisories/2007/3587
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579
http://www.vupen.com/english/advisories/2008/0083
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
http://www.vupen.com/english/advisories/2008/0643
http://www.vupen.com/english/advisories/2007/3545
https://exchange.xforce.ibmcloud.com/vulnerabilities/37282
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9622
https://usn.ubuntu.com/535-1/
http://www.securityfocus.com/archive/1/482932/100/200/threaded
http://www.securityfocus.com/archive/1/482925/100/0/threaded
http://www.securityfocus.com/archive/1/482876/100/200/threaded
History
Created Old Value New Value Data Type Notes
2022-05-10 18:20:11 Added to TrackCVE
2023-02-13 03:02:08 2023-02-13T02:18:25 CVE Modified Date updated