Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2671
HistoryMay 14, 2007 - 12:00 a.m.

CVE-2007-2671

2007-05-1400:00:00
ubuntu.com
ubuntu.com
5

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.058 Low

EPSS

Percentile

93.4%

Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of
service (application crash) via a long hostname in an HREF attribute in an
A element, which triggers an out-of-bounds memory access.

Notes

Author Note
kees browser crash
jdstrand browser crash is not security vulnerability, and this affect later versions of firefox

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.058 Low

EPSS

Percentile

93.4%