Search for vulnerabilities
| Vulnerability ID | VCID-qcc9-2ba2-aaad |
| Aliases |
CVE-2007-2671
|
| Summary | Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 6.4 |
| Risk | 10.0 |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| Reference id | Reference type | URL |
|---|---|---|
| http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/062773.html | ||
| http://osvdb.org/35700 | ||
| https://api.first.org/data/v1/epss?cve=CVE-2007-2671 | ||
| http://securityreason.com/securityalert/2704 | ||
| https://exchange.xforce.ibmcloud.com/vulnerabilities/33982 | ||
| http://www.critical.lt/research/opera_die_happy.html | ||
| http://www.securityfocus.com/bid/23747 | ||
| cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:* | https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:* | |
| CVE-2007-2671 | https://nvd.nist.gov/vuln/detail/CVE-2007-2671 | |
| CVE-2007-2671;OSVDB-35700 | Exploit | https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/29940.html |
| CVE-2007-2671;OSVDB-35700 | Exploit | https://www.securityfocus.com/bid/23747/info |
| GLSA-201301-01 | https://security.gentoo.org/glsa/201301-01 |
| Data source | Exploit-DB |
|---|---|
| Date added | May 1, 2007 |
| Description | Mozilla Firefox 2.0.0.3 - Href Denial of Service |
| Ransomware campaign use | Known |
| Source publication date | May 1, 2007 |
| Exploit type | dos |
| Platform | windows |
| Source update date | Dec. 1, 2013 |
| Source URL | https://www.securityfocus.com/bid/23747/info |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.91563 |
| EPSS Score | 0.03627 |
| Published At | Dec. 17, 2024, midnight |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| There are no relevant records. | ||||