National Cyber Awareness System

Vulnerability Summary for CVE-2007-0775

Overview

Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via certain vectors.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#761756

Name: VU#761756

Hyperlink:http://www.kb.cert.org/vuls/id/761756

External Source: CONFIRM

Name: http://www.mozilla.org/security/announce/2007/mfsa2007-01.html

Type: Advisory; Patch Information

Hyperlink:http://www.mozilla.org/security/announce/2007/mfsa2007-01.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-1103

Hyperlink:https://issues.rpath.com/browse/RPL-1103

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-1081

Hyperlink:https://issues.rpath.com/browse/RPL-1081

External Source: XF

Name: mozilla-multiple-layout-code-execution(32704)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32704

External Source: VUPEN

Name: ADV-2008-0083

Hyperlink:http://www.vupen.com/english/advisories/2008/0083

External Source: VUPEN

Name: ADV-2007-0719

Hyperlink:http://www.vupen.com/english/advisories/2007/0719

External Source: VUPEN

Name: ADV-2007-0718

Hyperlink:http://www.vupen.com/english/advisories/2007/0718

External Source: UBUNTU

Name: USN-431-1

Hyperlink:http://www.ubuntu.com/usn/usn-431-1

External Source: UBUNTU

Name: USN-428-1

Hyperlink:http://www.ubuntu.com/usn/usn-428-1

External Source: SECTRACK

Name: 1017698

Hyperlink:http://www.securitytracker.com/id?1017698

External Source: BID

Name: 22694

Hyperlink:http://www.securityfocus.com/bid/22694

External Source: BUGTRAQ

Name: 20070303 rPSA-2007-0040-3 firefox thunderbird

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/461809/100/0/threaded

External Source: BUGTRAQ

Name: 20070226 rPSA-2007-0040-1 firefox

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/461336/100/0/threaded

External Source: REDHAT

Name: RHSA-2007:0108

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0108.html

External Source: REDHAT

Name: RHSA-2007:0097

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0097.html

External Source: REDHAT

Name: RHSA-2007:0079

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0079.html

External Source: REDHAT

Name: RHSA-2007:0078

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0078.html

External Source: MANDRIVA

Name: MDKSA-2007:052

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:052

External Source: MANDRIVA

Name: MDKSA-2007:050

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:050

External Source: GENTOO

Name: GLSA-200703-08

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml

External Source: DEBIAN

Name: DSA-1336

Hyperlink:http://www.debian.org/security/2007/dsa-1336

External Source: SLACKWARE

Name: SSA:2007-066-03

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851

External Source: SLACKWARE

Name: SSA:2007-066-04

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947

External Source: SLACKWARE

Name: SSA:2007-066-05

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131

External Source: GENTOO

Name: GLSA-200703-18

Hyperlink:http://security.gentoo.org/glsa/glsa-200703-18.xml

External Source: GENTOO

Name: GLSA-200703-04

Hyperlink:http://security.gentoo.org/glsa/glsa-200703-04.xml

External Source: SECUNIA

Name: 24650

Type: Advisory

Hyperlink:http://secunia.com/advisories/24650

External Source: SECUNIA

Name: 24522

Type: Advisory

Hyperlink:http://secunia.com/advisories/24522

External Source: SECUNIA

Name: 24437

Type: Advisory

Hyperlink:http://secunia.com/advisories/24437

External Source: SECUNIA

Name: 24410

Type: Advisory

Hyperlink:http://secunia.com/advisories/24410

External Source: SECUNIA

Name: 24395

Type: Advisory

Hyperlink:http://secunia.com/advisories/24395

External Source: SECUNIA

Name: 24393

Type: Advisory

Hyperlink:http://secunia.com/advisories/24393

External Source: SECUNIA

Name: 24389

Type: Advisory

Hyperlink:http://secunia.com/advisories/24389

External Source: SECUNIA

Name: 24384

Type: Advisory

Hyperlink:http://secunia.com/advisories/24384

External Source: SECUNIA

Name: 24343

Type: Advisory

Hyperlink:http://secunia.com/advisories/24343

External Source: SECUNIA

Name: 24333

Type: Advisory

Hyperlink:http://secunia.com/advisories/24333

External Source: SECUNIA

Name: 24328

Type: Advisory

Hyperlink:http://secunia.com/advisories/24328

External Source: SECUNIA

Name: 24320

Type: Advisory

Hyperlink:http://secunia.com/advisories/24320

External Source: SECUNIA

Name: 24293

Type: Advisory

Hyperlink:http://secunia.com/advisories/24293

External Source: SECUNIA

Name: 24290

Type: Advisory

Hyperlink:http://secunia.com/advisories/24290

External Source: SECUNIA

Name: 24287

Type: Advisory

Hyperlink:http://secunia.com/advisories/24287

External Source: SECUNIA

Name: 24252

Type: Advisory

Hyperlink:http://secunia.com/advisories/24252

External Source: SECUNIA

Name: 24238

Type: Advisory

Hyperlink:http://secunia.com/advisories/24238

External Source: SECUNIA

Name: 24205

Type: Advisory

Hyperlink:http://secunia.com/advisories/24205

External Source: REDHAT

Name: RHSA-2007:0077

Type: Advisory

Hyperlink:http://rhn.redhat.com/errata/RHSA-2007-0077.html

External Source: OVAL

Name: oval:org.mitre.oval:def:10012

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10012

External Source: SUSE

Name: SUSE-SA:2007:019

Hyperlink:http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html

External Source: HP

Name: SSRT061181

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

External Source: FEDORA

Name: FEDORA-2007-309

Hyperlink:http://fedoranews.org/cms/node/2749

External Source: FEDORA

Name: FEDORA-2007-308

Hyperlink:http://fedoranews.org/cms/node/2747

External Source: FEDORA

Name: FEDORA-2007-293

Hyperlink:http://fedoranews.org/cms/node/2728

External Source: FEDORA

Name: FEDORA-2007-281

Hyperlink:http://fedoranews.org/cms/node/2713

External Source: SGI

Name: 20070301-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc

External Source: SGI

Name: 20070202-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc

External Source: OSVDB

Name: 32114

Hyperlink:http://www.osvdb.org/32114

External Source: SUSE

Name: SUSE-SA:2007:022

Hyperlink:http://www.novell.com/linux/security/advisories/2007_22_mozilla.html

External Source: SECUNIA

Name: 25588

Hyperlink:http://secunia.com/advisories/25588

External Source: SECUNIA

Name: 24457

Hyperlink:http://secunia.com/advisories/24457

External Source: SECUNIA

Name: 24456

Hyperlink:http://secunia.com/advisories/24456

External Source: SECUNIA

Name: 24455

Hyperlink:http://secunia.com/advisories/24455

External Source: SECUNIA

Name: 24406

Hyperlink:http://secunia.com/advisories/24406

External Source: SECUNIA

Name: 24342

Hyperlink:http://secunia.com/advisories/24342

External Source: HP

Name: SSRT061181

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

References to Check Content

Identifier:oval:org.mitre.oval:def:10012

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10012