CVE-2007-0009
Fixed in a distro release EPSS 51%
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
Products: mozilla firefox, mozilla network_security_services, mozilla seamonkey, mozilla thunderbird, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | mozilla-firefox | 1.0.4-2sarge17 |
| Red Hat Enterprise Linux 2.1 | seamonkey | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-chat | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-devel | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-dom-inspector | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-js-debugger | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-mail | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr-devel | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss-devel | 0:1.0.8-0.2.el2 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.8-0.2.el3 |
| Red Hat Enterprise Linux 4 | devhelp | 0:0.10-0.7.el4 |
| Red Hat Enterprise Linux 4 | devhelp-debuginfo | 0:0.10-0.7.el4 |
| Red Hat Enterprise Linux 4 | devhelp-devel | 0:0.10-0.7.el4 |
| Red Hat Enterprise Linux 4 | firefox | 0:1.5.0.10-0.1.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:1.5.0.10-0.1.el4 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.8-0.2.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.8-0.2.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.8-0.2.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.8-0.2.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.8-0.2.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.8-0.2.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.8-0.2.el4 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.10-0.1.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.10-0.1.el4 |
| Red Hat Enterprise Linux 5 | devhelp | 0:0.12-10.0.1.el5 |
| Red Hat Enterprise Linux 5 | devhelp-debuginfo | 0:0.12-10.0.1.el5 |
| Red Hat Enterprise Linux 5 | devhelp-devel | 0:0.12-10.0.1.el5 |
| Red Hat Enterprise Linux 5 | firefox | 0:1.5.0.10-2.el5 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:1.5.0.10-2.el5 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:1.5.0.10-1.el5 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:1.5.0.10-1.el5 |
| Red Hat Enterprise Linux 5 | yelp | 0:2.16.0-14.0.1.el5 |
| Red Hat Enterprise Linux 5 | yelp-debuginfo | 0:2.16.0-14.0.1.el5 |
| openSUSE Tumbleweed | MozillaFirefox | 92.0-1.2 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |