Published: 01/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Mozilla Firefox 1.5.x prior to 1.5.0.12 and 2.x prior to 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote malicious users to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 1.5.0.1
mozilla firefox 1.5.0.7
mozilla firefox 1.5.0.8
mozilla firefox 1.5.6
mozilla firefox 1.5.7
mozilla seamonkey 1.1.2
mozilla firefox 1.5.0.5
mozilla firefox 1.5.0.6
mozilla firefox 1.5.4
mozilla firefox 1.5.5
mozilla firefox 2.0.0.3
mozilla seamonkey 1.0.9
mozilla firefox 1.5.0.10
mozilla firefox 1.5.0.11
mozilla firefox 1.5.0.9
mozilla firefox 1.5.1
mozilla firefox 1.5.8
mozilla firefox 2.0
mozilla firefox 1.5.0.2
mozilla firefox 1.5.0.3
mozilla firefox 1.5.0.4
mozilla firefox 1.5.2
mozilla firefox 1.5.3
mozilla firefox 2.0.0.1
mozilla firefox 2.0.0.2

Various flaws were discovered in the layout and JavaScript engines By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user’s privileges (CVE-2007-2867, CVE-2007-2868) ...

Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-1362 Nicolas Derouet discovered that Iceape performs insufficient validation of cookies, which could lead to den ...

Mozilla Foundation Security Advisory 2007-14 Path Abuse in Cookies Announced May 30, 2007 Reporter Nicolas Derouet Impact Low Products Firefox, SeaMonkey Fixed in Firefox 15012 ...

source: wwwsecurityfocuscom/bid/22879/info Mozilla Firefox is prone to a remote denial-of-service vulnerability An attacker may exploit this vulnerability to cause Mozilla Firefox to crash, resulting in denial-of-service conditions Little is known regarding this vulnerability; this BID will be updated when more information is disclose ...

CWE-20 http://www.mozilla.org/security/announce/2007/mfsa2007-14.html https://issues.rpath.com/browse/RPL-1424 http://www.debian.org/security/2007/dsa-1300 http://www.debian.org/security/2007/dsa-1306 http://www.debian.org/security/2007/dsa-1308 http://security.gentoo.org/glsa/glsa-200706-06.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 http://www.redhat.com/support/errata/RHSA-2007-0400.html http://www.redhat.com/support/errata/RHSA-2007-0401.html http://www.redhat.com/support/errata/RHSA-2007-0402.html http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 http://www.novell.com/linux/security/advisories/2007_36_mozilla.html http://www.ubuntu.com/usn/usn-468-1 http://www.us-cert.gov/cas/techalerts/TA07-151A.html http://www.securityfocus.com/bid/24242 http://www.securityfocus.com/bid/22879 http://www.osvdb.org/35139 http://www.securitytracker.com/id?1018162 http://www.securitytracker.com/id?1018163 http://secunia.com/advisories/25476 http://secunia.com/advisories/25533 http://secunia.com/advisories/25559 http://secunia.com/advisories/25635 http://secunia.com/advisories/25647 http://secunia.com/advisories/25685 http://secunia.com/advisories/25534 http://secunia.com/advisories/25490 http://secunia.com/advisories/25750 http://secunia.com/advisories/25858 http://www.vupen.com/english/advisories/2007/1994 http://osvdb.org/35140 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 https://exchange.xforce.ibmcloud.com/vulnerabilities/34613 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10759 http://www.securityfocus.com/archive/1/470172/100/200/threaded https://usn.ubuntu.com/468-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/29720/

CVE-2007-1362

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect