CVE-2007-0009
NoneCVSS
—
EPSS
50.6%
Published
Feb 26, 2007
CISA due date
—
The record
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.1 | mozilla-firefox | 0 | 1.0.4-2sarge17 |
| Red Hat:enterprise_linux:2.1::as | seamonkey | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-chat | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-mail | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nspr | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nss | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-chat | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-mail | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nspr | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nss | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-chat | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-mail | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nspr | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nss | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-chat | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-mail | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nspr | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nss | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:3::as | seamonkey | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-chat | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-mail | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-chat | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-mail | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-chat | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-mail | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-chat | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-mail | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:5::client | devhelp | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client | devhelp-debuginfo | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client | devhelp-devel | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:1.5.0.10-2.el5 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:1.5.0.10-2.el5 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:1.5.0.10-1.el5 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:1.5.0.10-1.el5 |
| Red Hat:enterprise_linux:5::client | yelp | 0 | 0:2.16.0-14.0.1.el5 |
| Red Hat:enterprise_linux:5::client | yelp-debuginfo | 0 | 0:2.16.0-14.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp-debuginfo | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp-devel | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::server | devhelp | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::server | devhelp-debuginfo | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::server | devhelp-devel | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:1.5.0.10-2.el5 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:1.5.0.10-2.el5 |
| Red Hat:enterprise_linux:5::server | yelp | 0 | 0:2.16.0-14.0.1.el5 |
| Red Hat:enterprise_linux:5::server | yelp-debuginfo | 0 | 0:2.16.0-14.0.1.el5 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 92.0-1.2 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2007-0981 Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and… Also affects mozilla-firefox
- CVE-2007-0045 Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before… Also affects mozilla-firefox
- CVE-2006-1993 Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a… Also affects mozilla-firefox
- CVE-2006-1730 Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before… Also affects mozilla-firefox
- CVE-2006-0749 nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before… Also affects mozilla-firefox
- CVE-2005-4134 Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote… Also affects mozilla-firefox
- CVE-2005-2871 Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6… Also affects mozilla-firefox
- CVE-2005-2265 Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote… Also affects mozilla-firefox