CVE-2007-0009

Опубликовано: 26 фев. 2007

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc
Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
Broken Link
http://fedoranews.org/cms/node/2709
Broken Link
http://fedoranews.org/cms/node/2711
Broken Link
http://fedoranews.org/cms/node/2747
Broken Link
http://fedoranews.org/cms/node/2749
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=483
Broken Link
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
Broken Link
http://rhn.redhat.com/errata/RHSA-2007-0077.html
Third Party Advisory
http://secunia.com/advisories/24253
Third Party Advisory
http://secunia.com/advisories/24277
Third Party Advisory
http://secunia.com/advisories/24287
Third Party Advisory
http://secunia.com/advisories/24290
Third Party Advisory
http://secunia.com/advisories/24293
Third Party Advisory
http://secunia.com/advisories/24333
Third Party Advisory
http://secunia.com/advisories/24342
Third Party Advisory
http://secunia.com/advisories/24343
Third Party Advisory
http://secunia.com/advisories/24384
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 1.5 (включая) до 1.5.0.10 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.2 (исключая)

cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*

Версия до 3.11.5 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия до 1.0.8 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия до 1.5.0.10 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.48677

Средний

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2007-0009

ubuntu

больше 18 лет назад

CVE-2007-0009

redhat

больше 18 лет назад

CVE-2007-0009

debian

больше 18 лет назад

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Se ...

GHSA-f72q-g9vm-gpmq

github

больше 3 лет назад

EPSS

Процентиль: 98%

0.48677

Средний

6.8 Medium

CVSS2

Дефекты

CWE-119