CVE-2007-0776 - Vulnerability Details

Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Mozilla	Firefox Seamonkey Thunderbird

Configuration 1 [-]

OR	cpe:2.3:a:mozilla:firefox::::::::
	cpe:2.3:a:mozilla:seamonkey::::::::
	cpe:2.3:a:mozilla:thunderbird::::::::

No data.

References

Link	Providers
http://fedoranews.org/cms/node/2713
http://fedoranews.org/cms/node/2728
http://fedoranews.org/cms/node/2747
http://fedoranews.org/cms/node/2749
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
http://secunia.com/advisories/24205
http://secunia.com/advisories/24238
http://secunia.com/advisories/24252
http://secunia.com/advisories/24293
http://secunia.com/advisories/24320
http://secunia.com/advisories/24328
http://secunia.com/advisories/24333
http://secunia.com/advisories/24384
http://secunia.com/advisories/24389
http://secunia.com/advisories/24393
http://secunia.com/advisories/24406
http://secunia.com/advisories/24410
http://secunia.com/advisories/24437
http://secunia.com/advisories/24455
http://secunia.com/advisories/24456
http://secunia.com/advisories/24457
http://secunia.com/advisories/24522
http://security.gentoo.org/glsa/glsa-200703-04.xml
http://security.gentoo.org/glsa/glsa-200703-18.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml
http://www.kb.cert.org/vuls/id/551436
http://www.mandriva.com/security/advisories?name=MDKSA-2007:052
http://www.mozilla.org/security/announce/2007/mfsa2007-01.html
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
http://www.osvdb.org/32113
http://www.securityfocus.com/archive/1/461336/100/0/threaded
http://www.securityfocus.com/archive/1/461809/100/0/threaded
http://www.securityfocus.com/bid/22694
http://www.securitytracker.com/id?1017698
http://www.ubuntu.com/usn/usn-428-1
http://www.ubuntu.com/usn/usn-431-1
http://www.vupen.com/english/advisories/2007/0718
http://www.vupen.com/english/advisories/2007/0719
http://www.vupen.com/english/advisories/2008/0083
https://bugzilla.mozilla.org/show_bug.cgi?id=360645
https://exchange.xforce.ibmcloud.com/vulnerabilities/32698
https://issues.rpath.com/browse/RPL-1081

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2007-02-26T19:00:00

Updated: 2024-08-07T12:34:20.851Z

Reserved: 2007-02-06T00:00:00

Link: CVE-2007-0776

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-02-26T19:28:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-0776

Redhat

No data.

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-02-23T00:00:00", "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "VU#551436", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/551436"}, {"name": "20070226 rPSA-2007-0040-1 firefox", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/461336/100/0/threaded"}, {"name": "FEDORA-2007-308", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://fedoranews.org/cms/node/2747"}, {"name": "24328", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24328"}, {"name": "GLSA-200703-04", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200703-04.xml"}, {"name": "24252", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24252"}, {"name": "GLSA-200703-08", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml"}, {"name": "SSA:2007-066-03", "tags": ["vendor-advisory", "x_refsource_SLACKWARE"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851"}, {"name": "24384", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24384"}, {"name": "24406", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24406"}, {"name": "24457", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24457"}, {"name": "MDKSA-2007:052", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:052"}, {"name": "HPSBUX02153", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"name": "ADV-2007-0718", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0718"}, {"name": "FEDORA-2007-309", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://fedoranews.org/cms/node/2749"}, {"name": "GLSA-200703-18", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200703-18.xml"}, {"name": "USN-428-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/usn-428-1"}, {"name": "24320", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24320"}, {"name": "SUSE-SA:2007:019", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html"}, {"name": "ADV-2008-0083", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0083"}, {"name": "20070303 rPSA-2007-0040-3 firefox thunderbird", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/461809/100/0/threaded"}, {"name": "firefox-strokewidth-bo(32698)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32698"}, {"name": "SUSE-SA:2007:022", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2007_22_mozilla.html"}, {"name": "24293", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24293"}, {"name": "24238", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24238"}, {"name": "SSA:2007-066-04", "tags": ["vendor-advisory", "x_refsource_SLACKWARE"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947"}, {"name": "24456", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24456"}, {"name": "24393", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24393"}, {"name": "24522", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24522"}, {"tags": ["x_refsource_MISC"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=360645"}, {"name": "22694", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22694"}, {"name": "SSRT061181", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"name": "ADV-2007-0719", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0719"}, {"name": "FEDORA-2007-281", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://fedoranews.org/cms/node/2713"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.mozilla.org/security/announce/2007/mfsa2007-01.html"}, {"name": "USN-431-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/usn-431-1"}, {"name": "FEDORA-2007-293", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://fedoranews.org/cms/node/2728"}, {"name": "32113", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/32113"}, {"name": "24205", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24205"}, {"name": "24389", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24389"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://issues.rpath.com/browse/RPL-1081"}, {"name": "24410", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24410"}, {"name": "24333", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24333"}, {"name": "24455", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24455"}, {"name": "1017698", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1017698"}, {"name": "SSA:2007-066-05", "tags": ["vendor-advisory", "x_refsource_SLACKWARE"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131"}, {"name": "24437", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24437"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2007-0776", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "VU#551436", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/551436"}, {"name": "20070226 rPSA-2007-0040-1 firefox", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/461336/100/0/threaded"}, {"name": "FEDORA-2007-308", "refsource": "FEDORA", "url": "http://fedoranews.org/cms/node/2747"}, {"name": "24328", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24328"}, {"name": "GLSA-200703-04", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200703-04.xml"}, {"name": "24252", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24252"}, {"name": "GLSA-200703-08", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml"}, {"name": "SSA:2007-066-03", "refsource": "SLACKWARE", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851"}, {"name": "24384", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24384"}, {"name": "24406", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24406"}, {"name": "24457", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24457"}, {"name": "MDKSA-2007:052", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:052"}, {"name": "HPSBUX02153", "refsource": "HP", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"name": "ADV-2007-0718", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0718"}, {"name": "FEDORA-2007-309", "refsource": "FEDORA", "url": "http://fedoranews.org/cms/node/2749"}, {"name": "GLSA-200703-18", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200703-18.xml"}, {"name": "USN-428-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-428-1"}, {"name": "24320", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24320"}, {"name": "SUSE-SA:2007:019", "refsource": "SUSE", "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html"}, {"name": "ADV-2008-0083", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0083"}, {"name": "20070303 rPSA-2007-0040-3 firefox thunderbird", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/461809/100/0/threaded"}, {"name": "firefox-strokewidth-bo(32698)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32698"}, {"name": "SUSE-SA:2007:022", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2007_22_mozilla.html"}, {"name": "24293", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24293"}, {"name": "24238", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24238"}, {"name": "SSA:2007-066-04", "refsource": "SLACKWARE", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947"}, {"name": "24456", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24456"}, {"name": "24393", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24393"}, {"name": "24522", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24522"}, {"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=360645", "refsource": "MISC", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=360645"}, {"name": "22694", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22694"}, {"name": "SSRT061181", "refsource": "HP", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"name": "ADV-2007-0719", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0719"}, {"name": "FEDORA-2007-281", "refsource": "FEDORA", "url": "http://fedoranews.org/cms/node/2713"}, {"name": "http://www.mozilla.org/security/announce/2007/mfsa2007-01.html", "refsource": "CONFIRM", "url": "http://www.mozilla.org/security/announce/2007/mfsa2007-01.html"}, {"name": "USN-431-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-431-1"}, {"name": "FEDORA-2007-293", "refsource": "FEDORA", "url": "http://fedoranews.org/cms/node/2728"}, {"name": "32113", "refsource": "OSVDB", "url": "http://www.osvdb.org/32113"}, {"name": "24205", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24205"}, {"name": "24389", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24389"}, {"name": "https://issues.rpath.com/browse/RPL-1081", "refsource": "CONFIRM", "url": "https://issues.rpath.com/browse/RPL-1081"}, {"name": "24410", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24410"}, {"name": "24333", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24333"}, {"name": "24455", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24455"}, {"name": "1017698", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1017698"}, {"name": "SSA:2007-066-05", "refsource": "SLACKWARE", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131"}, {"name": "24437", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24437"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:34:20.851Z"}, "title": "CVE Program Container", "references": [{"name": "VU#551436", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/551436"}, {"name": "20070226 rPSA-2007-0040-1 firefox", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/461336/100/0/threaded"}, {"name": "FEDORA-2007-308", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://fedoranews.org/cms/node/2747"}, {"name": "24328", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24328"}, {"name": "GLSA-200703-04", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200703-04.xml"}, {"name": "24252", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24252"}, {"name": "GLSA-200703-08", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml"}, {"name": "SSA:2007-066-03", "tags": ["vendor-advisory", "x_refsource_SLACKWARE", "x_transferred"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851"}, {"name": "24384", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24384"}, {"name": "24406", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24406"}, {"name": "24457", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24457"}, {"name": "MDKSA-2007:052", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:052"}, {"name": "HPSBUX02153", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"name": "ADV-2007-0718", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0718"}, {"name": "FEDORA-2007-309", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://fedoranews.org/cms/node/2749"}, {"name": "GLSA-200703-18", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200703-18.xml"}, {"name": "USN-428-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/usn-428-1"}, {"name": "24320", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24320"}, {"name": "SUSE-SA:2007:019", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html"}, {"name": "ADV-2008-0083", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/0083"}, {"name": "20070303 rPSA-2007-0040-3 firefox thunderbird", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/461809/100/0/threaded"}, {"name": "firefox-strokewidth-bo(32698)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32698"}, {"name": "SUSE-SA:2007:022", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2007_22_mozilla.html"}, {"name": "24293", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24293"}, {"name": "24238", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24238"}, {"name": "SSA:2007-066-04", "tags": ["vendor-advisory", "x_refsource_SLACKWARE", "x_transferred"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947"}, {"name": "24456", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24456"}, {"name": "24393", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24393"}, {"name": "24522", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24522"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=360645"}, {"name": "22694", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22694"}, {"name": "SSRT061181", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"name": "ADV-2007-0719", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0719"}, {"name": "FEDORA-2007-281", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://fedoranews.org/cms/node/2713"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.mozilla.org/security/announce/2007/mfsa2007-01.html"}, {"name": "USN-431-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/usn-431-1"}, {"name": "FEDORA-2007-293", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://fedoranews.org/cms/node/2728"}, {"name": "32113", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/32113"}, {"name": "24205", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24205"}, {"name": "24389", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24389"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://issues.rpath.com/browse/RPL-1081"}, {"name": "24410", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24410"}, {"name": "24333", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24333"}, {"name": "24455", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24455"}, {"name": "1017698", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1017698"}, {"name": "SSA:2007-066-05", "tags": ["vendor-advisory", "x_refsource_SLACKWARE", "x_transferred"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131"}, {"name": "24437", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24437"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2007-0776", "datePublished": "2007-02-26T19:00:00", "dateReserved": "2007-02-06T00:00:00", "dateUpdated": "2024-08-07T12:34:20.851Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2007-02-23T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-10-16T14:57:01 (string)

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

}

references : [ »

0 : { »

name : VU#551436 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_CERT-VN (string)

]

url : http://www.kb.cert.org/vuls/id/551436 (string)

}

1 : { »

name : 20070226 rPSA-2007-0040-1 firefox (string)

tags : [ »

0 : mailing-list (string)

1 : x_refsource_BUGTRAQ (string)

]

url : http://www.securityfocus.com/archive/1/461336/100/0/threaded (string)

}

2 : { »

name : FEDORA-2007-308 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_FEDORA (string)

]

url : http://fedoranews.org/cms/node/2747 (string)

}

3 : { »

name : 24328 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24328 (string)

}

4 : { »

name : GLSA-200703-04 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_GENTOO (string)

]

url : http://security.gentoo.org/glsa/glsa-200703-04.xml (string)

}

5 : { »

name : 24252 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24252 (string)

}

6 : { »

name : GLSA-200703-08 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_GENTOO (string)

]

url : http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml (string)

}

7 : { »

name : SSA:2007-066-03 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SLACKWARE (string)

]

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 (string)

}

8 : { »

name : 24384 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24384 (string)

}

9 : { »

name : 24406 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24406 (string)

}

10 : { »

name : 24457 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24457 (string)

}

11 : { »

name : MDKSA-2007:052 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_MANDRIVA (string)

]

url : http://www.mandriva.com/security/advisories?name=MDKSA-2007:052 (string)

}

12 : { »

name : HPSBUX02153 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_HP (string)

]

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

13 : { »

name : ADV-2007-0718 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_VUPEN (string)

]

url : http://www.vupen.com/english/advisories/2007/0718 (string)

}

14 : { »

name : FEDORA-2007-309 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_FEDORA (string)

]

url : http://fedoranews.org/cms/node/2749 (string)

}

15 : { »

name : GLSA-200703-18 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_GENTOO (string)

]

url : http://security.gentoo.org/glsa/glsa-200703-18.xml (string)

}

16 : { »

name : USN-428-1 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_UBUNTU (string)

]

url : http://www.ubuntu.com/usn/usn-428-1 (string)

}

17 : { »

name : 24320 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24320 (string)

}

18 : { »

name : SUSE-SA:2007:019 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SUSE (string)

]

url : http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html (string)

}

19 : { »

name : ADV-2008-0083 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_VUPEN (string)

]

url : http://www.vupen.com/english/advisories/2008/0083 (string)

}

20 : { »

name : 20070303 rPSA-2007-0040-3 firefox thunderbird (string)

tags : [ »

0 : mailing-list (string)

1 : x_refsource_BUGTRAQ (string)

]

url : http://www.securityfocus.com/archive/1/461809/100/0/threaded (string)

}

21 : { »

name : firefox-strokewidth-bo(32698) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/32698 (string)

}

22 : { »

name : SUSE-SA:2007:022 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SUSE (string)

]

url : http://www.novell.com/linux/security/advisories/2007_22_mozilla.html (string)

}

23 : { »

name : 24293 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24293 (string)

}

24 : { »

name : 24238 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24238 (string)

}

25 : { »

name : SSA:2007-066-04 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SLACKWARE (string)

]

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 (string)

}

26 : { »

name : 24456 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24456 (string)

}

27 : { »

name : 24393 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24393 (string)

}

28 : { »

name : 24522 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24522 (string)

}

29 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://bugzilla.mozilla.org/show_bug.cgi?id=360645 (string)

}

30 : { »

name : 22694 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/22694 (string)

}

31 : { »

name : SSRT061181 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_HP (string)

]

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

32 : { »

name : ADV-2007-0719 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_VUPEN (string)

]

url : http://www.vupen.com/english/advisories/2007/0719 (string)

}

33 : { »

name : FEDORA-2007-281 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_FEDORA (string)

]

url : http://fedoranews.org/cms/node/2713 (string)

}

34 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www.mozilla.org/security/announce/2007/mfsa2007-01.html (string)

}

35 : { »

name : USN-431-1 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_UBUNTU (string)

]

url : http://www.ubuntu.com/usn/usn-431-1 (string)

}

36 : { »

name : FEDORA-2007-293 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_FEDORA (string)

]

url : http://fedoranews.org/cms/node/2728 (string)

}

37 : { »

name : 32113 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_OSVDB (string)

]

url : http://www.osvdb.org/32113 (string)

}

38 : { »

name : 24205 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24205 (string)

}

39 : { »

name : 24389 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24389 (string)

}

40 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://issues.rpath.com/browse/RPL-1081 (string)

}

41 : { »

name : 24410 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24410 (string)

}

42 : { »

name : 24333 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24333 (string)

}

43 : { »

name : 24455 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24455 (string)

}

44 : { »

name : 1017698 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id?1017698 (string)

}

45 : { »

name : SSA:2007-066-05 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SLACKWARE (string)

]

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 (string)

}

46 : { »

name : 24437 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/24437 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : secalert@redhat.com (string)

ID : CVE-2007-0776 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : VU#551436 (string)

refsource : CERT-VN (string)

url : http://www.kb.cert.org/vuls/id/551436 (string)

}

1 : { »

name : 20070226 rPSA-2007-0040-1 firefox (string)

refsource : BUGTRAQ (string)

url : http://www.securityfocus.com/archive/1/461336/100/0/threaded (string)

}

2 : { »

name : FEDORA-2007-308 (string)

refsource : FEDORA (string)

url : http://fedoranews.org/cms/node/2747 (string)

}

3 : { »

name : 24328 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24328 (string)

}

4 : { »

name : GLSA-200703-04 (string)

refsource : GENTOO (string)

url : http://security.gentoo.org/glsa/glsa-200703-04.xml (string)

}

5 : { »

name : 24252 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24252 (string)

}

6 : { »

name : GLSA-200703-08 (string)

refsource : GENTOO (string)

url : http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml (string)

}

7 : { »

name : SSA:2007-066-03 (string)

refsource : SLACKWARE (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 (string)

}

8 : { »

name : 24384 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24384 (string)

}

9 : { »

name : 24406 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24406 (string)

}

10 : { »

name : 24457 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24457 (string)

}

11 : { »

name : MDKSA-2007:052 (string)

refsource : MANDRIVA (string)

url : http://www.mandriva.com/security/advisories?name=MDKSA-2007:052 (string)

}

12 : { »

name : HPSBUX02153 (string)

refsource : HP (string)

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

13 : { »

name : ADV-2007-0718 (string)

refsource : VUPEN (string)

url : http://www.vupen.com/english/advisories/2007/0718 (string)

}

14 : { »

name : FEDORA-2007-309 (string)

refsource : FEDORA (string)

url : http://fedoranews.org/cms/node/2749 (string)

}

15 : { »

name : GLSA-200703-18 (string)

refsource : GENTOO (string)

url : http://security.gentoo.org/glsa/glsa-200703-18.xml (string)

}

16 : { »

name : USN-428-1 (string)

refsource : UBUNTU (string)

url : http://www.ubuntu.com/usn/usn-428-1 (string)

}

17 : { »

name : 24320 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24320 (string)

}

18 : { »

name : SUSE-SA:2007:019 (string)

refsource : SUSE (string)

url : http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html (string)

}

19 : { »

name : ADV-2008-0083 (string)

refsource : VUPEN (string)

url : http://www.vupen.com/english/advisories/2008/0083 (string)

}

20 : { »

name : 20070303 rPSA-2007-0040-3 firefox thunderbird (string)

refsource : BUGTRAQ (string)

url : http://www.securityfocus.com/archive/1/461809/100/0/threaded (string)

}

21 : { »

name : firefox-strokewidth-bo(32698) (string)

refsource : XF (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/32698 (string)

}

22 : { »

name : SUSE-SA:2007:022 (string)

refsource : SUSE (string)

url : http://www.novell.com/linux/security/advisories/2007_22_mozilla.html (string)

}

23 : { »

name : 24293 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24293 (string)

}

24 : { »

name : 24238 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24238 (string)

}

25 : { »

name : SSA:2007-066-04 (string)

refsource : SLACKWARE (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 (string)

}

26 : { »

name : 24456 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24456 (string)

}

27 : { »

name : 24393 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24393 (string)

}

28 : { »

name : 24522 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24522 (string)

}

29 : { »

name : https://bugzilla.mozilla.org/show_bug.cgi?id=360645 (string)

refsource : MISC (string)

url : https://bugzilla.mozilla.org/show_bug.cgi?id=360645 (string)

}

30 : { »

name : 22694 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/22694 (string)

}

31 : { »

name : SSRT061181 (string)

refsource : HP (string)

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

32 : { »

name : ADV-2007-0719 (string)

refsource : VUPEN (string)

url : http://www.vupen.com/english/advisories/2007/0719 (string)

}

33 : { »

name : FEDORA-2007-281 (string)

refsource : FEDORA (string)

url : http://fedoranews.org/cms/node/2713 (string)

}

34 : { »

name : http://www.mozilla.org/security/announce/2007/mfsa2007-01.html (string)

refsource : CONFIRM (string)

url : http://www.mozilla.org/security/announce/2007/mfsa2007-01.html (string)

}

35 : { »

name : USN-431-1 (string)

refsource : UBUNTU (string)

url : http://www.ubuntu.com/usn/usn-431-1 (string)

}

36 : { »

name : FEDORA-2007-293 (string)

refsource : FEDORA (string)

url : http://fedoranews.org/cms/node/2728 (string)

}

37 : { »

name : 32113 (string)

refsource : OSVDB (string)

url : http://www.osvdb.org/32113 (string)

}

38 : { »

name : 24205 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24205 (string)

}

39 : { »

name : 24389 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24389 (string)

}

40 : { »

name : https://issues.rpath.com/browse/RPL-1081 (string)

refsource : CONFIRM (string)

url : https://issues.rpath.com/browse/RPL-1081 (string)

}

41 : { »

name : 24410 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24410 (string)

}

42 : { »

name : 24333 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24333 (string)

}

43 : { »

name : 24455 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24455 (string)

}

44 : { »

name : 1017698 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id?1017698 (string)

}

45 : { »

name : SSA:2007-066-05 (string)

refsource : SLACKWARE (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 (string)

}

46 : { »

name : 24437 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/24437 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-07T12:34:20.851Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : VU#551436 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_CERT-VN (string)

2 : x_transferred (string)

]

url : http://www.kb.cert.org/vuls/id/551436 (string)

}

1 : { »

name : 20070226 rPSA-2007-0040-1 firefox (string)

tags : [ »

0 : mailing-list (string)

1 : x_refsource_BUGTRAQ (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/archive/1/461336/100/0/threaded (string)

}

2 : { »

name : FEDORA-2007-308 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_FEDORA (string)

2 : x_transferred (string)

]

url : http://fedoranews.org/cms/node/2747 (string)

}

3 : { »

name : 24328 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24328 (string)

}

4 : { »

name : GLSA-200703-04 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_GENTOO (string)

2 : x_transferred (string)

]

url : http://security.gentoo.org/glsa/glsa-200703-04.xml (string)

}

5 : { »

name : 24252 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24252 (string)

}

6 : { »

name : GLSA-200703-08 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_GENTOO (string)

2 : x_transferred (string)

]

url : http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml (string)

}

7 : { »

name : SSA:2007-066-03 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SLACKWARE (string)

2 : x_transferred (string)

]

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 (string)

}

8 : { »

name : 24384 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24384 (string)

}

9 : { »

name : 24406 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24406 (string)

}

10 : { »

name : 24457 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24457 (string)

}

11 : { »

name : MDKSA-2007:052 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_MANDRIVA (string)

2 : x_transferred (string)

]

url : http://www.mandriva.com/security/advisories?name=MDKSA-2007:052 (string)

}

12 : { »

name : HPSBUX02153 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_HP (string)

2 : x_transferred (string)

]

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

13 : { »

name : ADV-2007-0718 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_VUPEN (string)

2 : x_transferred (string)

]

url : http://www.vupen.com/english/advisories/2007/0718 (string)

}

14 : { »

name : FEDORA-2007-309 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_FEDORA (string)

2 : x_transferred (string)

]

url : http://fedoranews.org/cms/node/2749 (string)

}

15 : { »

name : GLSA-200703-18 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_GENTOO (string)

2 : x_transferred (string)

]

url : http://security.gentoo.org/glsa/glsa-200703-18.xml (string)

}

16 : { »

name : USN-428-1 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_UBUNTU (string)

2 : x_transferred (string)

]

url : http://www.ubuntu.com/usn/usn-428-1 (string)

}

17 : { »

name : 24320 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24320 (string)

}

18 : { »

name : SUSE-SA:2007:019 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SUSE (string)

2 : x_transferred (string)

]

url : http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html (string)

}

19 : { »

name : ADV-2008-0083 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_VUPEN (string)

2 : x_transferred (string)

]

url : http://www.vupen.com/english/advisories/2008/0083 (string)

}

20 : { »

name : 20070303 rPSA-2007-0040-3 firefox thunderbird (string)

tags : [ »

0 : mailing-list (string)

1 : x_refsource_BUGTRAQ (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/archive/1/461809/100/0/threaded (string)

}

21 : { »

name : firefox-strokewidth-bo(32698) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

2 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/32698 (string)

}

22 : { »

name : SUSE-SA:2007:022 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SUSE (string)

2 : x_transferred (string)

]

url : http://www.novell.com/linux/security/advisories/2007_22_mozilla.html (string)

}

23 : { »

name : 24293 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24293 (string)

}

24 : { »

name : 24238 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24238 (string)

}

25 : { »

name : SSA:2007-066-04 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SLACKWARE (string)

2 : x_transferred (string)

]

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 (string)

}

26 : { »

name : 24456 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24456 (string)

}

27 : { »

name : 24393 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24393 (string)

}

28 : { »

name : 24522 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24522 (string)

}

29 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://bugzilla.mozilla.org/show_bug.cgi?id=360645 (string)

}

30 : { »

name : 22694 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/22694 (string)

}

31 : { »

name : SSRT061181 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_HP (string)

2 : x_transferred (string)

]

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

32 : { »

name : ADV-2007-0719 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_VUPEN (string)

2 : x_transferred (string)

]

url : http://www.vupen.com/english/advisories/2007/0719 (string)

}

33 : { »

name : FEDORA-2007-281 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_FEDORA (string)

2 : x_transferred (string)

]

url : http://fedoranews.org/cms/node/2713 (string)

}

34 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www.mozilla.org/security/announce/2007/mfsa2007-01.html (string)

}

35 : { »

name : USN-431-1 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_UBUNTU (string)

2 : x_transferred (string)

]

url : http://www.ubuntu.com/usn/usn-431-1 (string)

}

36 : { »

name : FEDORA-2007-293 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_FEDORA (string)

2 : x_transferred (string)

]

url : http://fedoranews.org/cms/node/2728 (string)

}

37 : { »

name : 32113 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_OSVDB (string)

2 : x_transferred (string)

]

url : http://www.osvdb.org/32113 (string)

}

38 : { »

name : 24205 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24205 (string)

}

39 : { »

name : 24389 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24389 (string)

}

40 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://issues.rpath.com/browse/RPL-1081 (string)

}

41 : { »

name : 24410 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24410 (string)

}

42 : { »

name : 24333 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24333 (string)

}

43 : { »

name : 24455 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24455 (string)

}

44 : { »

name : 1017698 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id?1017698 (string)

}

45 : { »

name : SSA:2007-066-05 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_SLACKWARE (string)

2 : x_transferred (string)

]

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 (string)

}

46 : { »

name : 24437 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/24437 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

assignerShortName : redhat (string)

cveId : CVE-2007-0776 (string)

datePublished : 2007-02-26T19:00:00 (string)

dateReserved : 2007-02-06T00:00:00 (string)

dateUpdated : 2024-08-07T12:34:20.851Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "matchCriteriaId": "6AFDBFCE-228C-416A-AB9D-36C09EBB1A5F", "versionEndIncluding": "2.0.0.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "matchCriteriaId": "0679D9AD-ECEA-4C75-BFED-822F00A49628", "versionEndIncluding": "1.0.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "matchCriteriaId": "498716C3-FAA0-4156-8EAC-EF1F9A8C69F4", "versionEndIncluding": "1.5.0.9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file."}, {"lang": "es", "value": "Un Desbordamiento de b\u00fafer en la regi\u00f3n heap de la memoria en la funci\u00f3n _cairo_pen_init en Mozilla Firefox versi\u00f3n  2.x anterior a 2.0.0.2, Thunderbird anterior a  la versi\u00f3n 1.5.0.10, y SeaMonkey anterior a versi\u00f3n 1.0.8 permite a los atacantes remotos ejecutar c\u00f3digo arbitrario por medio de un atributo stroke-width en el elemento clipPath en un archivo SVG."}], "id": "CVE-2007-0776", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-02-26T19:28:00.000", "references": [{"source": "secalert@redhat.com", "url": "http://fedoranews.org/cms/node/2713"}, {"source": "secalert@redhat.com", "url": "http://fedoranews.org/cms/node/2728"}, {"source": "secalert@redhat.com", "url": "http://fedoranews.org/cms/node/2747"}, {"source": "secalert@redhat.com", "url": "http://fedoranews.org/cms/node/2749"}, {"source": "secalert@redhat.com", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"source": "secalert@redhat.com", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"source": "secalert@redhat.com", "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24205"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24238"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24252"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24293"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24320"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24328"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24333"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24384"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24389"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24393"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24406"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24410"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24437"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24455"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24456"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24457"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24522"}, {"source": "secalert@redhat.com", "url": "http://security.gentoo.org/glsa/glsa-200703-04.xml"}, {"source": "secalert@redhat.com", "url": "http://security.gentoo.org/glsa/glsa-200703-18.xml"}, {"source": "secalert@redhat.com", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131"}, {"source": "secalert@redhat.com", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947"}, {"source": "secalert@redhat.com", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851"}, {"source": "secalert@redhat.com", "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml"}, {"source": "secalert@redhat.com", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/551436"}, {"source": "secalert@redhat.com", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:052"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.mozilla.org/security/announce/2007/mfsa2007-01.html"}, {"source": "secalert@redhat.com", "url": "http://www.novell.com/linux/security/advisories/2007_22_mozilla.html"}, {"source": "secalert@redhat.com", "url": "http://www.osvdb.org/32113"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/archive/1/461336/100/0/threaded"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/archive/1/461809/100/0/threaded"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/22694"}, {"source": "secalert@redhat.com", "url": "http://www.securitytracker.com/id?1017698"}, {"source": "secalert@redhat.com", "url": "http://www.ubuntu.com/usn/usn-428-1"}, {"source": "secalert@redhat.com", "url": "http://www.ubuntu.com/usn/usn-431-1"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2007/0718"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2007/0719"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2008/0083"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=360645"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32698"}, {"source": "secalert@redhat.com", "url": "https://issues.rpath.com/browse/RPL-1081"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://fedoranews.org/cms/node/2713"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://fedoranews.org/cms/node/2728"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://fedoranews.org/cms/node/2747"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://fedoranews.org/cms/node/2749"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24205"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24238"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24252"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24293"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24320"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24328"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24333"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24384"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24389"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24393"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24406"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24410"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24437"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24455"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24456"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24457"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24522"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-200703-04.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-200703-18.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/551436"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:052"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.mozilla.org/security/announce/2007/mfsa2007-01.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.novell.com/linux/security/advisories/2007_22_mozilla.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/32113"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/461336/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/461809/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/22694"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1017698"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/usn-428-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/usn-431-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2007/0718"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2007/0719"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2008/0083"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=360645"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32698"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://issues.rpath.com/browse/RPL-1081"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6AFDBFCE-228C-416A-AB9D-36C09EBB1A5F (string)

versionEndIncluding : 2.0.0.1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0679D9AD-ECEA-4C75-BFED-822F00A49628 (string)

versionEndIncluding : 1.0.7 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 498716C3-FAA0-4156-8EAC-EF1F9A8C69F4 (string)

versionEndIncluding : 1.5.0.9 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

}

1 : { »

lang : es (string)

value : Un Desbordamiento de búfer en la región heap de la memoria en la función _cairo_pen_init en Mozilla Firefox versión 2.x anterior a 2.0.0.2, Thunderbird anterior a la versión 1.5.0.10, y SeaMonkey anterior a versión 1.0.8 permite a los atacantes remotos ejecutar código arbitrario por medio de un atributo stroke-width en el elemento clipPath en un archivo SVG. (string)

}

]

id : CVE-2007-0776 (string)

lastModified : 2025-04-09T00:30:58.490 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 9.3 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:N/AC:M/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

}

published : 2007-02-26T19:28:00.000 (string)

references : [ »

0 : { »

source : secalert@redhat.com (string)

url : http://fedoranews.org/cms/node/2713 (string)

}

1 : { »

source : secalert@redhat.com (string)

url : http://fedoranews.org/cms/node/2728 (string)

}

2 : { »

source : secalert@redhat.com (string)

url : http://fedoranews.org/cms/node/2747 (string)

}

3 : { »

source : secalert@redhat.com (string)

url : http://fedoranews.org/cms/node/2749 (string)

}

4 : { »

source : secalert@redhat.com (string)

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

5 : { »

source : secalert@redhat.com (string)

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

6 : { »

source : secalert@redhat.com (string)

url : http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html (string)

}

7 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24205 (string)

}

8 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24238 (string)

}

9 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24252 (string)

}

10 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24293 (string)

}

11 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24320 (string)

}

12 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24328 (string)

}

13 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24333 (string)

}

14 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24384 (string)

}

15 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24389 (string)

}

16 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24393 (string)

}

17 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24406 (string)

}

18 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24410 (string)

}

19 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24437 (string)

}

20 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24455 (string)

}

21 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24456 (string)

}

22 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24457 (string)

}

23 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24522 (string)

}

24 : { »

source : secalert@redhat.com (string)

url : http://security.gentoo.org/glsa/glsa-200703-04.xml (string)

}

25 : { »

source : secalert@redhat.com (string)

url : http://security.gentoo.org/glsa/glsa-200703-18.xml (string)

}

26 : { »

source : secalert@redhat.com (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 (string)

}

27 : { »

source : secalert@redhat.com (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 (string)

}

28 : { »

source : secalert@redhat.com (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 (string)

}

29 : { »

source : secalert@redhat.com (string)

url : http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml (string)

}

30 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : US Government Resource (string)

]

url : http://www.kb.cert.org/vuls/id/551436 (string)

}

31 : { »

source : secalert@redhat.com (string)

url : http://www.mandriva.com/security/advisories?name=MDKSA-2007:052 (string)

}

32 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.mozilla.org/security/announce/2007/mfsa2007-01.html (string)

}

33 : { »

source : secalert@redhat.com (string)

url : http://www.novell.com/linux/security/advisories/2007_22_mozilla.html (string)

}

34 : { »

source : secalert@redhat.com (string)

url : http://www.osvdb.org/32113 (string)

}

35 : { »

source : secalert@redhat.com (string)

url : http://www.securityfocus.com/archive/1/461336/100/0/threaded (string)

}

36 : { »

source : secalert@redhat.com (string)

url : http://www.securityfocus.com/archive/1/461809/100/0/threaded (string)

}

37 : { »

source : secalert@redhat.com (string)

url : http://www.securityfocus.com/bid/22694 (string)

}

38 : { »

source : secalert@redhat.com (string)

url : http://www.securitytracker.com/id?1017698 (string)

}

39 : { »

source : secalert@redhat.com (string)

url : http://www.ubuntu.com/usn/usn-428-1 (string)

}

40 : { »

source : secalert@redhat.com (string)

url : http://www.ubuntu.com/usn/usn-431-1 (string)

}

41 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.vupen.com/english/advisories/2007/0718 (string)

}

42 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.vupen.com/english/advisories/2007/0719 (string)

}

43 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.vupen.com/english/advisories/2008/0083 (string)

}

44 : { »

source : secalert@redhat.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://bugzilla.mozilla.org/show_bug.cgi?id=360645 (string)

}

45 : { »

source : secalert@redhat.com (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/32698 (string)

}

46 : { »

source : secalert@redhat.com (string)

url : https://issues.rpath.com/browse/RPL-1081 (string)

}

47 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://fedoranews.org/cms/node/2713 (string)

}

48 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://fedoranews.org/cms/node/2728 (string)

}

49 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://fedoranews.org/cms/node/2747 (string)

}

50 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://fedoranews.org/cms/node/2749 (string)

}

51 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

52 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 (string)

}

53 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html (string)

}

54 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24205 (string)

}

55 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24238 (string)

}

56 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24252 (string)

}

57 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24293 (string)

}

58 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24320 (string)

}

59 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24328 (string)

}

60 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24333 (string)

}

61 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24384 (string)

}

62 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24389 (string)

}

63 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24393 (string)

}

64 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24406 (string)

}

65 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24410 (string)

}

66 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24437 (string)

}

67 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24455 (string)

}

68 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24456 (string)

}

69 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24457 (string)

}

70 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/24522 (string)

}

71 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://security.gentoo.org/glsa/glsa-200703-04.xml (string)

}

72 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://security.gentoo.org/glsa/glsa-200703-18.xml (string)

}

73 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 (string)

}

74 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 (string)

}

75 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 (string)

}

76 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml (string)

}

77 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : US Government Resource (string)

]

url : http://www.kb.cert.org/vuls/id/551436 (string)

}

78 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.mandriva.com/security/advisories?name=MDKSA-2007:052 (string)

}

79 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.mozilla.org/security/announce/2007/mfsa2007-01.html (string)

}

80 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.novell.com/linux/security/advisories/2007_22_mozilla.html (string)

}

81 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.osvdb.org/32113 (string)

}

82 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securityfocus.com/archive/1/461336/100/0/threaded (string)

}

83 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securityfocus.com/archive/1/461809/100/0/threaded (string)

}

84 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securityfocus.com/bid/22694 (string)

}

85 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securitytracker.com/id?1017698 (string)

}

86 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.ubuntu.com/usn/usn-428-1 (string)

}

87 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.ubuntu.com/usn/usn-431-1 (string)

}

88 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.vupen.com/english/advisories/2007/0718 (string)

}

89 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.vupen.com/english/advisories/2007/0719 (string)

}

90 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.vupen.com/english/advisories/2008/0083 (string)

}

91 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://bugzilla.mozilla.org/show_bug.cgi?id=360645 (string)

}

92 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/32698 (string)

}

93 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://issues.rpath.com/browse/RPL-1081 (string)

}

]

sourceIdentifier : secalert@redhat.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-119 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object