CVEDB API

Vulnerability Details CVE-2007-0009

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.487

EPSS Ranking 97.6%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2007-0009

Mozilla » Firefox » Version: 1.5

cpe:2.3:a:mozilla:firefox:1.5
Mozilla » Firefox » Version: 1.5.0.1

cpe:2.3:a:mozilla:firefox:1.5.0.1
Mozilla » Firefox » Version: 1.5.0.2

cpe:2.3:a:mozilla:firefox:1.5.0.2
Mozilla » Firefox » Version: 1.5.0.3

cpe:2.3:a:mozilla:firefox:1.5.0.3
Mozilla » Firefox » Version: 1.5.0.4

cpe:2.3:a:mozilla:firefox:1.5.0.4
Mozilla » Firefox » Version: 1.5.0.5

cpe:2.3:a:mozilla:firefox:1.5.0.5
Mozilla » Firefox » Version: 1.5.0.6

cpe:2.3:a:mozilla:firefox:1.5.0.6
Mozilla » Firefox » Version: 1.5.0.7

cpe:2.3:a:mozilla:firefox:1.5.0.7
Mozilla » Firefox » Version: 1.5.0.8

cpe:2.3:a:mozilla:firefox:1.5.0.8
Mozilla » Firefox » Version: 1.5.0.9

cpe:2.3:a:mozilla:firefox:1.5.0.9
Mozilla » Firefox » Version: 2.0

cpe:2.3:a:mozilla:firefox:2.0
Mozilla » Firefox » Version: 2.0.0.1

cpe:2.3:a:mozilla:firefox:2.0.0.1
Mozilla » Network Security Services » Version: N/A

cpe:2.3:a:mozilla:network_security_services:-
Mozilla » Network Security Services » Version: 3.1

cpe:2.3:a:mozilla:network_security_services:3.1
Mozilla » Network Security Services » Version: 3.1.1

cpe:2.3:a:mozilla:network_security_services:3.1.1
Mozilla » Network Security Services » Version: 3.10

cpe:2.3:a:mozilla:network_security_services:3.10
Mozilla » Network Security Services » Version: 3.10.1

cpe:2.3:a:mozilla:network_security_services:3.10.1
Mozilla » Network Security Services » Version: 3.10.2

cpe:2.3:a:mozilla:network_security_services:3.10.2
Mozilla » Network Security Services » Version: 3.11

cpe:2.3:a:mozilla:network_security_services:3.11
Mozilla » Network Security Services » Version: 3.11.1

cpe:2.3:a:mozilla:network_security_services:3.11.1
Mozilla » Network Security Services » Version: 3.11.2

cpe:2.3:a:mozilla:network_security_services:3.11.2
Mozilla » Network Security Services » Version: 3.11.3

cpe:2.3:a:mozilla:network_security_services:3.11.3
Mozilla » Network Security Services » Version: 3.11.4

cpe:2.3:a:mozilla:network_security_services:3.11.4
Mozilla » Network Security Services » Version: 3.2

cpe:2.3:a:mozilla:network_security_services:3.2
Mozilla » Network Security Services » Version: 3.2.1

cpe:2.3:a:mozilla:network_security_services:3.2.1
Mozilla » Network Security Services » Version: 3.3

cpe:2.3:a:mozilla:network_security_services:3.3
Mozilla » Network Security Services » Version: 3.3.1

cpe:2.3:a:mozilla:network_security_services:3.3.1
Mozilla » Network Security Services » Version: 3.3.2

cpe:2.3:a:mozilla:network_security_services:3.3.2
Mozilla » Network Security Services » Version: 3.4

cpe:2.3:a:mozilla:network_security_services:3.4
Mozilla » Network Security Services » Version: 3.4.1

cpe:2.3:a:mozilla:network_security_services:3.4.1
Mozilla » Network Security Services » Version: 3.4.2

cpe:2.3:a:mozilla:network_security_services:3.4.2
Mozilla » Network Security Services » Version: 3.4.3

cpe:2.3:a:mozilla:network_security_services:3.4.3
Mozilla » Network Security Services » Version: 3.5

cpe:2.3:a:mozilla:network_security_services:3.5
Mozilla » Network Security Services » Version: 3.6

cpe:2.3:a:mozilla:network_security_services:3.6
Mozilla » Network Security Services » Version: 3.6.1

cpe:2.3:a:mozilla:network_security_services:3.6.1
Mozilla » Network Security Services » Version: 3.7

cpe:2.3:a:mozilla:network_security_services:3.7
Mozilla » Network Security Services » Version: 3.7.1

cpe:2.3:a:mozilla:network_security_services:3.7.1
Mozilla » Network Security Services » Version: 3.7.2

cpe:2.3:a:mozilla:network_security_services:3.7.2
Mozilla » Network Security Services » Version: 3.7.3

cpe:2.3:a:mozilla:network_security_services:3.7.3
Mozilla » Network Security Services » Version: 3.7.5

cpe:2.3:a:mozilla:network_security_services:3.7.5
Mozilla » Network Security Services » Version: 3.7.7

cpe:2.3:a:mozilla:network_security_services:3.7.7
Mozilla » Network Security Services » Version: 3.8

cpe:2.3:a:mozilla:network_security_services:3.8
Mozilla » Network Security Services » Version: 3.9

cpe:2.3:a:mozilla:network_security_services:3.9
Mozilla » Network Security Services » Version: 3.9.1

cpe:2.3:a:mozilla:network_security_services:3.9.1
Mozilla » Network Security Services » Version: 3.9.2

cpe:2.3:a:mozilla:network_security_services:3.9.2
Mozilla » Network Security Services » Version: 3.9.3

cpe:2.3:a:mozilla:network_security_services:3.9.3
Mozilla » Network Security Services » Version: 3.9.4

cpe:2.3:a:mozilla:network_security_services:3.9.4
Mozilla » Network Security Services » Version: 3.9.5

cpe:2.3:a:mozilla:network_security_services:3.9.5
Mozilla » Seamonkey » Version: N/A

cpe:2.3:a:mozilla:seamonkey:-
Mozilla » Seamonkey » Version: 1.0

cpe:2.3:a:mozilla:seamonkey:1.0
Mozilla » Seamonkey » Version: 1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1
Mozilla » Seamonkey » Version: 1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2
Mozilla » Seamonkey » Version: 1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3
Mozilla » Seamonkey » Version: 1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4
Mozilla » Seamonkey » Version: 1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5
Mozilla » Seamonkey » Version: 1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6
Mozilla » Seamonkey » Version: 1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7
Mozilla » Thunderbird » Version: N/A

cpe:2.3:a:mozilla:thunderbird:-
Mozilla » Thunderbird » Version: 0.1

cpe:2.3:a:mozilla:thunderbird:0.1
Mozilla » Thunderbird » Version: 0.2

cpe:2.3:a:mozilla:thunderbird:0.2
Mozilla » Thunderbird » Version: 0.3

cpe:2.3:a:mozilla:thunderbird:0.3
Mozilla » Thunderbird » Version: 0.4

cpe:2.3:a:mozilla:thunderbird:0.4
Mozilla » Thunderbird » Version: 0.5

cpe:2.3:a:mozilla:thunderbird:0.5
Mozilla » Thunderbird » Version: 0.6

cpe:2.3:a:mozilla:thunderbird:0.6
Mozilla » Thunderbird » Version: 0.7

cpe:2.3:a:mozilla:thunderbird:0.7
Mozilla » Thunderbird » Version: 0.7.1

cpe:2.3:a:mozilla:thunderbird:0.7.1
Mozilla » Thunderbird » Version: 0.7.2

cpe:2.3:a:mozilla:thunderbird:0.7.2
Mozilla » Thunderbird » Version: 0.7.3

cpe:2.3:a:mozilla:thunderbird:0.7.3
Mozilla » Thunderbird » Version: 0.8

cpe:2.3:a:mozilla:thunderbird:0.8
Mozilla » Thunderbird » Version: 0.9

cpe:2.3:a:mozilla:thunderbird:0.9
Mozilla » Thunderbird » Version: 1.0

cpe:2.3:a:mozilla:thunderbird:1.0
Mozilla » Thunderbird » Version: 1.0.2

cpe:2.3:a:mozilla:thunderbird:1.0.2
Mozilla » Thunderbird » Version: 1.0.5

cpe:2.3:a:mozilla:thunderbird:1.0.5
Mozilla » Thunderbird » Version: 1.0.6

cpe:2.3:a:mozilla:thunderbird:1.0.6
Mozilla » Thunderbird » Version: 1.0.7

cpe:2.3:a:mozilla:thunderbird:1.0.7
Mozilla » Thunderbird » Version: 1.0.8

cpe:2.3:a:mozilla:thunderbird:1.0.8
Mozilla » Thunderbird » Version: 1.1

cpe:2.3:a:mozilla:thunderbird:1.1
Mozilla » Thunderbird » Version: 1.5

cpe:2.3:a:mozilla:thunderbird:1.5
Mozilla » Thunderbird » Version: 1.5.0.2

cpe:2.3:a:mozilla:thunderbird:1.5.0.2
Mozilla » Thunderbird » Version: 1.5.0.4

cpe:2.3:a:mozilla:thunderbird:1.5.0.4
Mozilla » Thunderbird » Version: 1.5.0.5

cpe:2.3:a:mozilla:thunderbird:1.5.0.5
Mozilla » Thunderbird » Version: 1.5.0.7

cpe:2.3:a:mozilla:thunderbird:1.5.0.7
Mozilla » Thunderbird » Version: 1.5.0.8

cpe:2.3:a:mozilla:thunderbird:1.5.0.8
Mozilla » Thunderbird » Version: 1.5.0.9

cpe:2.3:a:mozilla:thunderbird:1.5.0.9
Canonical » Ubuntu Linux » Version: 5.10

cpe:2.3:o:canonical:ubuntu_linux:5.10
Canonical » Ubuntu Linux » Version: 6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06
Canonical » Ubuntu Linux » Version: 6.10

cpe:2.3:o:canonical:ubuntu_linux:6.10
Debian » Debian Linux » Version: 3.1

cpe:2.3:o:debian:debian_linux:3.1
Debian » Debian Linux » Version: 4.0

cpe:2.3:o:debian:debian_linux:4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-0009

Products

Pricing

Contact Us