CVE-2007-0009: Buffer Overflow
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0009?
CVE-2007-0009 has been rated as critical due to the potential for remote code execution on affected systems.
How do I fix CVE-2007-0009?
To fix CVE-2007-0009, upgrade to Mozilla NSS version 3.11.5 or later and update affected applications such as Firefox and Thunderbird to the latest versions.
Which products are affected by CVE-2007-0009?
CVE-2007-0009 affects Mozilla Firefox before 1.5.0.10, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain versions of Mozilla NSS prior to 3.11.5.
Can CVE-2007-0009 be exploited remotely?
Yes, CVE-2007-0009 can be exploited remotely by an attacker to execute arbitrary code on the affected systems.
What type of vulnerability is CVE-2007-0009?
CVE-2007-0009 is characterized as a stack-based buffer overflow vulnerability.