Buffer overflow in Mozilla Firefox
CVE-2007-0009
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.8 (Medium). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.506 (98.9th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 98.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.506 · newest: 0.506 · change: 0.000
Affected products
- Mozilla Firefox
- Mozilla Network Security Services
- Mozilla Seamonkey
- Mozilla Thunderbird
- Canonical Ubuntu Linux — versions 5.10, 6.06, 6.10
- Debian Linux — versions 3.1, 4.0
Weakness classification (CWE)
References
- www.redhat.com/support/errata/RHSA-2007-0078.html (vendor-advisory, Third Party Advisory)
- secunia.com/advisories/24562 (Third Party Advisory, third-party-advisory)
- secunia.com/advisories/25597 (Third Party Advisory, third-party-advisory)
- www.gentoo.org/security/en/glsa/glsa-200703-22.xml (vendor-advisory, Third Party Advisory)
- fedoranews.org/cms/node/2709 (vendor-advisory, Broken Link)
- secunia.com/advisories/24703 (Third Party Advisory, third-party-advisory)
- secunia.com/advisories/24395 (Third Party Advisory, third-party-advisory)
- labs.idefense.com/intelligence/vulnerabilities/display.php (Broken Link, third-party-advisory)
- www.securityfocus.com/archive/1/461336/100/0/threaded (mailing-list, VDB Entry, Third Party Advisory)
- fedoranews.org/cms/node/2747 (vendor-advisory, Broken Link)