CVE-2007-0009
Description
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid Client Master Key length values.
Risk Information
Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
49.542
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities affected in Mozilla Firefox (x64) 2.0.0.1 | Windows |
| Multiple vulnerabilities affected in Mozilla Thunderbird 1.5.0.9 | Windows |
| Multiple vulnerabilities affected in Mozilla_Firefox 2.0.0.1 | Windows |
| Multiple vulnerabilities affected in SeaMonkey 1.0.7 | Windows |
| Vulnerabilities CVE-2007-0009,CVE-2014-0226,CVE-2014-6571 are affected in Oracle HTTP Server 6.8 | Windows |
| Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 2.0.0.1 | Windows |
| Multiple Vulnerabilities are affected in Mozilla_Firefox 2.0.0.1 | Windows |
| Multiple Vulnerabilities are affected in Mozilla Thunderbird 1.5.0.9 | Windows |
| Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 1.5.0.9 | Windows |
| Multiple Vulnerabilities are affected in Mozilla_Firefox 1.5.0.9 | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-343016 | Mozilla Firefox (x64) (132.0.2) |
| PATCH-315938 | Mozilla Thunderbird (68.12.0) |
| PATCH-343015 | Mozilla Firefox (132.0.2) |
| PATCH-341197 | SeaMonkey (2.53.19) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234