CVE-2007-5691
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of...
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."
Exploit likelihood
What each source reports
NVD Score used
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."
- Record
CVE-2007-5691- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."
- Record
CVE-2007-5691- Updated
- 2026-11-02
EUVDEUVD-2007-5663 No score
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."
- Record
EUVD-2007-5663- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p6h6-f79f-g6cp No score
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of...
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."
- Record
GHSA-p6h6-f79f-g6cp- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5691 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published October 29, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.13%, the 66th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/482597/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/37334
eleytt.com/advisories/eleytt_FFPARSEFTPLIST.pdf
osvdb.org/43609
securityreason.com/securityalert/3319
nvd.nist.gov/vuln/detail/CVE-2007-5691
github.com/advisories/GHSA-p6h6-f79f-g6cp