Rapid7 Vulnerability & Exploit Database

Gentoo Linux: CVE-2007-0008: Mozilla Thunderbird: Multiple vulnerabilities

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

Gentoo Linux: CVE-2007-0008: Mozilla Thunderbird: Multiple vulnerabilities

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Published

02/26/2007

Created

07/25/2018

Added

10/30/2017

Modified

10/29/2021

Description

Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via a crafted SSLv2 server message containing a public key that is too short to encrypt the "Master Secret", which results in a heap-based overflow.

Solution(s)

gentoo-linux-upgrade-dev-libs-nss
gentoo-linux-upgrade-mail-client-mozilla-thunderbird
gentoo-linux-upgrade-mail-client-mozilla-thunderbird-bin

References

https://attackerkb.com/topics/cve-2007-0008
22694
64758
377812
CVE - 2007-0008
DSA-1336
200703-18
200703-22
OVAL10502
RHSA-2007:0077
RHSA-2007:0078
RHSA-2007:0079
RHSA-2007:0097
RHSA-2007:0108
20070202-01-P
20070301-01-P
SUSE-SA:2007:019
SUSE-SA:2007:022
32666

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;