CVE-2007-0009 | BDVDB-2026-22472 Detail
Description#
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.redhat.com/support/errata/RHSA-2007-0078.html
- http://secunia.com/advisories/24562
- http://secunia.com/advisories/25597
- http://www.gentoo.org/security/en/glsa/glsa-200703-22.xml
- http://fedoranews.org/cms/node/2709
- http://secunia.com/advisories/24703
- http://secunia.com/advisories/24395
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=483
- http://www.securityfocus.com/archive/1/461336/100/0/threaded
- http://fedoranews.org/cms/node/2747
- http://www.redhat.com/support/errata/RHSA-2007-0108.html
- http://secunia.com/advisories/24277
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
- http://secunia.com/advisories/24384
- http://secunia.com/advisories/24406
Show all 40
- http://secunia.com/advisories/24457
- http://secunia.com/advisories/24253
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:052
- http://secunia.com/advisories/24343
- http://www.debian.org/security/2007/dsa-1336
- http://www.kb.cert.org/vuls/id/592796
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://www.vupen.com/english/advisories/2007/1165
- http://www.securitytracker.com/id?1017696
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102945-1
- http://www.vupen.com/english/advisories/2007/0718
- http://fedoranews.org/cms/node/2711
- http://fedoranews.org/cms/node/2749
- http://security.gentoo.org/glsa/glsa-200703-18.xml
- http://secunia.com/advisories/24650
- http://www.ubuntu.com/usn/usn-428-1
- http://secunia.com/advisories/25588
- https://issues.rpath.com/browse/RPL-1103
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
- http://www.securityfocus.com/archive/1/461809/100/0/threaded
- http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
- http://secunia.com/advisories/24293
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947
- http://secunia.com/advisories/24456
- http://www.mozilla.org/security/announce/2007/mfsa2007-06.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.