9.3
CVSSv2

CVE-2007-3735

Published: 18/07/2007 Updated: 15/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox prior to 2.0.0.5 and Thunderbird prior to 2.0.0.5 allow remote malicious users to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla thunderbird 2.0.0.1

mozilla thunderbird 2.0.0.2

mozilla firefox 2.0.0.4

mozilla thunderbird 2.0.0.0

mozilla firefox 2.0

mozilla firefox 2.0.0.1

mozilla thunderbird 2.0.0.3

mozilla thunderbird 2.0.0.4

mozilla firefox 2.0.0.2

mozilla firefox 2.0.0.3

Vendor Advisories

Debian Bug report logs - #444010 CVE-2007-3734 Multiple unspecified vulnerabilities Package: icedove; Maintainer for icedove is Carsten Schoenert <cschoenert@t-onlinede>; Source for icedove is src:thunderbird (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Tue, 25 Sep 2007 12:39:01 UTC Severi ...
Various flaws were discovered in the layout and JavaScript engines By tricking a user into opening a malicious email, an attacker could execute arbitrary code with the user’s privileges Please note that JavaScript is disabled by default for emails, and it is not recommended to enable it (CVE-2007-3734, CVE-2007-3735, CVE-2007-3844) ...
Various flaws were discovered in the layout and JavaScript engines By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user’s privileges (CVE-2007-3734, CVE-2007-3735) ...
Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into abou ...
Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into about:blank f ...
Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3734 Bernd Mielke, Boris Zbarsky, David Baron, Daniel Veditz, Jesse Ruderman, Lukas Loehrer, Martijn Wargers, Mats Palmg ...
Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into about:blank frames CVE-2007-3 ...
Mozilla Foundation Security Advisory 2007-18 Crashes with evidence of memory corruption (rv:1815) Announced July 17, 2007 Reporter Mozilla developers and community Impact Critical Products Firefox, SeaMonkey, Thunderbird ...

References

NVD-CWE-noinfohttp://secunia.com/advisories/26095ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txthttp://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.htmlhttp://www.debian.org/security/2007/dsa-1337http://www.debian.org/security/2007/dsa-1338http://www.debian.org/security/2007/dsa-1339http://www.debian.org/security/2007/dsa-1391http://www.gentoo.org/security/en/glsa/glsa-200708-09.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:152http://www.redhat.com/support/errata/RHSA-2007-0722.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0723.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0724.htmlftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.aschttp://www.novell.com/linux/security/advisories/2007_49_mozilla.htmlhttp://www.ubuntu.com/usn/usn-490-1http://www.ubuntu.com/usn/usn-503-1http://www.securityfocus.com/bid/24946http://www.securitytracker.com/id?1018408http://secunia.com/advisories/26096http://secunia.com/advisories/26103http://secunia.com/advisories/26106http://secunia.com/advisories/26107http://secunia.com/advisories/25589http://secunia.com/advisories/26179http://secunia.com/advisories/26149http://secunia.com/advisories/26151http://secunia.com/advisories/26072http://secunia.com/advisories/26176http://secunia.com/advisories/26211http://secunia.com/advisories/26216http://secunia.com/advisories/26204http://secunia.com/advisories/26205http://secunia.com/advisories/26159http://secunia.com/advisories/26271http://secunia.com/advisories/26258http://secunia.com/advisories/26460http://secunia.com/advisories/26572http://secunia.com/advisories/27326http://secunia.com/advisories/28363http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1http://secunia.com/advisories/28135http://www.mandriva.com/security/advisories?name=MDVSA-2007:047http://www.mandriva.com/security/advisories?name=MDVSA-2008:047http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1http://www.vupen.com/english/advisories/2008/0082http://www.vupen.com/english/advisories/2007/2564http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579http://www.vupen.com/english/advisories/2007/4256http://www.vupen.com/english/advisories/2007/2565http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742http://www.mozilla.org/security/announce/2007/mfsa2007-18.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/35459https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11066http://www.securityfocus.com/archive/1/474542/100/0/threadedhttp://www.securityfocus.com/archive/1/474226/100/0/threadedhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444010https://nvd.nist.govhttps://usn.ubuntu.com/503-1/