CVE-2007-0009
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS)...
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
Exploit likelihood
What each source reports
NVD Score used
6.8
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
- Record
CVE-2007-0009- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
- Record
CVE-2007-0009- Updated
- 2026-11-02
EUVDEUVD-2007-0013 No score
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
- Record
EUVD-2007-0013- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f72q-g9vm-gpmq No score
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS)...
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
- Record
GHSA-f72q-g9vm-gpmq- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score
MozillaFirefox-92.0-1.2 on GA media
These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10600-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mozilla-firefoxDebian:3.1 From an advisory covering 11 CVEs |
before 1.0.4-2sarge17, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge101.0.4-2sarge111.0.4-2sarge12 Show 10 moreShow less1.0.4-2sarge131.0.4-2sarge141.0.4-2sarge151.0.4-2sarge21.0.4-2sarge31.0.4-2sarge41.0.4-2sarge51.0.4-2sarge61.0.4-2sarge71.0.4-2sarge9 |
1.0.4-2sarge17 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
Show 151 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 13 CVEs |
before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 13 CVEs |
before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 13 CVEs |
before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelpRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:1.5.0.10-2.el5 | 0:1.5.0.10-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:1.5.0.10-2.el5 | 0:1.5.0.10-2.el5 |
yelpRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:2.16.0-14.0.1.el5 | 0:2.16.0-14.0.1.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:2.16.0-14.0.1.el5 | 0:2.16.0-14.0.1.el5 |
devhelpRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs |
before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs |
before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-develRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs |
before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs |
before 0:1.5.0.10-2.el5 | 0:1.5.0.10-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs |
before 0:1.5.0.10-2.el5 | 0:1.5.0.10-2.el5 |
yelpRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs |
before 0:2.16.0-14.0.1.el5 | 0:2.16.0-14.0.1.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs |
before 0:2.16.0-14.0.1.el5 | 0:2.16.0-14.0.1.el5 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:1.5.0.10-1.el5 | 0:1.5.0.10-1.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:1.5.0.10-1.el5 | 0:1.5.0.10-1.el5 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 661 CVEs |
before 92.0-1.2 | 92.0-1.2 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0009 is a medium vulnerability (CVSS 6.8) in Mozilla Firefox, published February 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 50.6%, the 98th percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2007-0078.html
secunia.com/advisories/24562
secunia.com/advisories/25597
gentoo.org/security/en/glsa/glsa-200703-22.xml
fedoranews.org/cms/node/2709
secunia.com/advisories/24703
Show 194 moreShow less
secunia.com/advisories/24395
labs.idefense.com/intelligence/vulnerabilities/display.php?id=483
securityfocus.com/archive/1/461336/100/0/threaded
fedoranews.org/cms/node/2747
redhat.com/support/errata/RHSA-2007-0108.html
secunia.com/advisories/24277
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
secunia.com/advisories/24384
secunia.com/advisories/24406
secunia.com/advisories/24457
secunia.com/advisories/24253
mandriva.com/security/advisories?name=MDKSA-2007:052
secunia.com/advisories/24343
debian.org/security/2007/dsa-1336
kb.cert.org/vuls/id/592796
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
vupen.com/english/advisories/2007/1165
securitytracker.com/id?1017696
sunsolve.sun.com/search/document.do?assetkey=1-26-102945-1
vupen.com/english/advisories/2007/0718
fedoranews.org/cms/node/2711
fedoranews.org/cms/node/2749
security.gentoo.org/glsa/glsa-200703-18.xml
secunia.com/advisories/24650
ubuntu.com/usn/usn-428-1
secunia.com/advisories/25588
issues.rpath.com/browse/RPL-1103
lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
securityfocus.com/archive/1/461809/100/0/threaded
novell.com/linux/security/advisories/2007_22_mozilla.html
secunia.com/advisories/24293
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947
secunia.com/advisories/24456
mozilla.org/security/announce/2007/mfsa2007-06.html
secunia.com/advisories/24342
secunia.com/advisories/24287
secunia.com/advisories/24522
sunsolve.sun.com/search/document.do?assetkey=1-26-102856-1
bugzilla.mozilla.org/show_bug.cgi?id=364323
vupen.com/english/advisories/2007/0719
ubuntu.com/usn/usn-431-1
redhat.com/support/errata/RHSA-2007-0097.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10174
secunia.com/advisories/24389
issues.rpath.com/browse/RPL-1081
secunia.com/advisories/24410
osvdb.org/32106
secunia.com/advisories/24333
exchange.xforce.ibmcloud.com/vulnerabilities/32663
vupen.com/english/advisories/2007/2141
mandriva.com/security/advisories?name=MDKSA-2007:050
securityfocus.com/bid/64758
secunia.com/advisories/24290
secunia.com/advisories/24455
rhn.redhat.com/errata/RHSA-2007-0077.html
oracle.com/technetwork/topics/security/cpujan2014-1972949.html
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
redhat.com/support/errata/RHSA-2007-0079.html
nvd.nist.gov/vuln/detail/CVE-2007-0009
github.com/advisories/GHSA-f72q-g9vm-gpmq
access.redhat.com/errata/RHSA-2007:0077
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=204589
bugzilla.redhat.com/show_bug.cgi?id=229805
bugzilla.redhat.com/show_bug.cgi?id=229987
bugzilla.redhat.com/show_bug.cgi?id=230158
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0077.json
access.redhat.com/security/cve/CVE-2006-6077
bugzilla.redhat.com/show_bug.cgi?id=1618236
cve.org/CVERecord?id=CVE-2006-6077
nvd.nist.gov/vuln/detail/CVE-2006-6077
access.redhat.com/security/cve/CVE-2007-0008
bugzilla.redhat.com/show_bug.cgi?id=565576
cve.org/CVERecord?id=CVE-2007-0008
nvd.nist.gov/vuln/detail/CVE-2007-0008
access.redhat.com/security/cve/CVE-2007-0009
cve.org/CVERecord?id=CVE-2007-0009
access.redhat.com/security/cve/CVE-2007-0775
bugzilla.redhat.com/show_bug.cgi?id=1618273
cve.org/CVERecord?id=CVE-2007-0775
nvd.nist.gov/vuln/detail/CVE-2007-0775
access.redhat.com/security/cve/CVE-2007-0777
bugzilla.redhat.com/show_bug.cgi?id=1618275
cve.org/CVERecord?id=CVE-2007-0777
nvd.nist.gov/vuln/detail/CVE-2007-0777
access.redhat.com/security/cve/CVE-2007-0778
bugzilla.redhat.com/show_bug.cgi?id=1618276
cve.org/CVERecord?id=CVE-2007-0778
nvd.nist.gov/vuln/detail/CVE-2007-0778
access.redhat.com/security/cve/CVE-2007-0779
bugzilla.redhat.com/show_bug.cgi?id=1618277
cve.org/CVERecord?id=CVE-2007-0779
nvd.nist.gov/vuln/detail/CVE-2007-0779
access.redhat.com/security/cve/CVE-2007-0780
bugzilla.redhat.com/show_bug.cgi?id=1618278
cve.org/CVERecord?id=CVE-2007-0780
nvd.nist.gov/vuln/detail/CVE-2007-0780
access.redhat.com/security/cve/CVE-2007-0800
bugzilla.redhat.com/show_bug.cgi?id=1618279
cve.org/CVERecord?id=CVE-2007-0800
nvd.nist.gov/vuln/detail/CVE-2007-0800
access.redhat.com/security/cve/CVE-2007-0981
bugzilla.redhat.com/show_bug.cgi?id=229253
cve.org/CVERecord?id=CVE-2007-0981
nvd.nist.gov/vuln/detail/CVE-2007-0981
access.redhat.com/security/cve/CVE-2007-0994
bugzilla.redhat.com/show_bug.cgi?id=1618286
cve.org/CVERecord?id=CVE-2007-0994
nvd.nist.gov/vuln/detail/CVE-2007-0994
access.redhat.com/security/cve/CVE-2007-0995
bugzilla.redhat.com/show_bug.cgi?id=1618287
cve.org/CVERecord?id=CVE-2007-0995
nvd.nist.gov/vuln/detail/CVE-2007-0995
access.redhat.com/security/cve/CVE-2007-0996
bugzilla.redhat.com/show_bug.cgi?id=1618288
cve.org/CVERecord?id=CVE-2007-0996
nvd.nist.gov/vuln/detail/CVE-2007-0996
access.redhat.com/security/cve/CVE-2007-1092
bugzilla.redhat.com/show_bug.cgi?id=1618293
cve.org/CVERecord?id=CVE-2007-1092
nvd.nist.gov/vuln/detail/CVE-2007-1092
access.redhat.com/security/cve/CVE-2007-1282
bugzilla.redhat.com/show_bug.cgi?id=1618295
cve.org/CVERecord?id=CVE-2007-1282
nvd.nist.gov/vuln/detail/CVE-2007-1282
access.redhat.com/errata/RHSA-2007:0078
bugzilla.redhat.com/show_bug.cgi?id=166574
bugzilla.redhat.com/show_bug.cgi?id=204453
bugzilla.redhat.com/show_bug.cgi?id=230542
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0078.json
access.redhat.com/errata/RHSA-2007:0079
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=202352
bugzilla.redhat.com/show_bug.cgi?id=229802
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0079.json
access.redhat.com/errata/RHSA-2007:0097
bugzilla.redhat.com/show_bug.cgi?id=230050
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0097.json
access.redhat.com/errata/RHSA-2007:0108
bugzilla.redhat.com/show_bug.cgi?id=230562
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0108.json
suse.com/security/cve/CVE-2006-6077
suse.com/security/cve/CVE-2007-0008
suse.com/security/cve/CVE-2007-0009
suse.com/security/cve/CVE-2007-0078
suse.com/security/cve/CVE-2007-0079
suse.com/security/cve/CVE-2007-0775
suse.com/security/cve/CVE-2007-0776
suse.com/security/cve/CVE-2007-0777
suse.com/security/cve/CVE-2007-0780
suse.com/security/cve/CVE-2007-0800
suse.com/security/cve/CVE-2007-0981
suse.com/security/cve/CVE-2007-0995
suse.com/security/cve/CVE-2007-0996
suse.com/security/cve/CVE-2007-3089
suse.com/security/cve/CVE-2007-3285
suse.com/security/cve/CVE-2007-3656
suse.com/security/cve/CVE-2007-3670
suse.com/security/cve/CVE-2007-3734
suse.com/security/cve/CVE-2007-3735
suse.com/security/cve/CVE-2007-3736
suse.com/security/cve/CVE-2007-3737
suse.com/security/cve/CVE-2007-3738
suse.com/security/cve/CVE-2008-0412
suse.com/security/cve/CVE-2008-0414
suse.com/security/cve/CVE-2008-0415
suse.com/security/cve/CVE-2008-0417
suse.com/security/cve/CVE-2008-0418
suse.com/security/cve/CVE-2008-0419
suse.com/security/cve/CVE-2008-0591
suse.com/security/cve/CVE-2008-0592
suse.com/security/cve/CVE-2008-0593
suse.com/security/cve/CVE-2008-0594
suse.com/security/cve/CVE-2008-4063
suse.com/security/cve/CVE-2009-0352
suse.com/security/cve/CVE-2009-0354
suse.com/security/cve/CVE-2009-0355
suse.com/security/cve/CVE-2009-0356
suse.com/security/cve/CVE-2009-0357
suse.com/security/cve/CVE-2009-0358
suse.com/security/cve/CVE-2017-16541
suse.com/security/cve/CVE-2017-5373
suse.com/security/cve/CVE-2017-5374
suse.com/security/cve/CVE-2017-5375
suse.com/security/cve/CVE-2017-5376
suse.com/security/cve/CVE-2017-5377
suse.com/security/cve/CVE-2017-5378
suse.com/security/cve/CVE-2017-5379
suse.com/security/cve/CVE-2017-5380
suse.com/security/cve/CVE-2017-5381
suse.com/security/cve/CVE-2017-5382
suse.com/security/cve/CVE-2017-5383
suse.com/security/cve/CVE-2017-5384
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
Left out here: 1,808 references. The JSON record has them.