CVE-2007-0008: Medium severity mozilla Network Security Services vulnerability
Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via a crafted SSLv2 server message containing a public key that is too short to encrypt the "Master Secret", which results in a heap-based overflow.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0008?
CVE-2007-0008 is categorized with a high severity rating, allowing remote attackers to execute arbitrary code.
How do I fix CVE-2007-0008?
To remediate CVE-2007-0008, upgrade to the latest version of Mozilla Firefox, SeaMonkey, or Thunderbird that is not affected by this vulnerability.
What software is affected by CVE-2007-0008?
CVE-2007-0008 affects various versions of Mozilla Firefox, SeaMonkey, Thunderbird, and certain versions of Sun Java System server products.
Can CVE-2007-0008 be exploited remotely?
Yes, attackers can exploit CVE-2007-0008 remotely due to the presence of SSLv2 support in affected software.
What types of attacks can CVE-2007-0008 facilitate?
CVE-2007-0008 can facilitate remote code execution attacks, potentially compromising the affected systems.