NVD

Id
52996  
Name
CVE-2007-0776  
Description
Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-02-26  
Modified Date
2011-10-17  
Seq
2007-0776  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
267913 52996 CVE-2007-0776 FEDORA-2007-281  View
267914 52996 CVE-2007-0776 FEDORA-2007-293  View
267915 52996 CVE-2007-0776 FEDORA-2007-308  View
267916 52996 CVE-2007-0776 FEDORA-2007-309  View
267917 52996 CVE-2007-0776 HPSBUX02153  View
267918 52996 CVE-2007-0776 SUSE-SA:2007:019  View
267919 52996 CVE-2007-0776 GLSA-200703-04  View
267920 52996 CVE-2007-0776 GLSA-200703-18  View
267921 52996 CVE-2007-0776 SSA:2007-066-05  View
267922 52996 CVE-2007-0776 SSA:2007-066-04  View
267923 52996 CVE-2007-0776 SSA:2007-066-03  View
267924 52996 CVE-2007-0776 GLSA-200703-08  View
267925 52996 CVE-2007-0776 VU#551436  View
267926 52996 CVE-2007-0776 MDKSA-2007:052  View
267927 52996 CVE-2007-0776 http://www.mozilla.org/security/announce/2007/mfsa2007-01.html  View
267928 52996 CVE-2007-0776 SUSE-SA:2007:022  View
267929 52996 CVE-2007-0776 20070226 rPSA-2007-0040-1 firefox  View
267930 52996 CVE-2007-0776 20070303 rPSA-2007-0040-3 firefox thunderbird  View
267931 52996 CVE-2007-0776 22694  View
267932 52996 CVE-2007-0776 1017698  View
267933 52996 CVE-2007-0776 USN-428-1  View
267934 52996 CVE-2007-0776 USN-431-1  View
267935 52996 CVE-2007-0776 ADV-2007-0718  View
267936 52996 CVE-2007-0776 ADV-2007-0719  View
267937 52996 CVE-2007-0776 ADV-2008-0083  View
267938 52996 CVE-2007-0776 firefox-strokewidth-bo(32698)  View
267939 52996 CVE-2007-0776 https://bugzilla.mozilla.org/show_bug.cgi?id=360645  View
267940 52996 CVE-2007-0776 https://issues.rpath.com/browse/RPL-1081  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51510 JVNDB-2007-000172 Mozilla Firefox の _cairo_pen_init() 関数におけるヒープオーバーフローの脆弱性 Mozilla Firefox の _cairo_pen_init() 関数には、過度に大きな値が stroke-width 属性に指定されている SVG ファイルを処理した際に、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2007-0776 24131 CVE-2007-0776 52996 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000172.html 2007-02-23 2007-08-01 View