Lucene search

K
cve[email protected]CVE-2007-0776
HistoryFeb 26, 2007 - 7:28 p.m.

CVE-2007-0776

2007-02-2619:28:00
CWE-119
web.nvd.nist.gov
23
cve
2007-0776
buffer overflow
mozilla firefox
thunderbird
seamonkey
remote code execution
svg
nvd

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.94 High

EPSS

Percentile

99.1%

Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file.

References

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.94 High

EPSS

Percentile

99.1%

Related for CVE-2007-0776