CVE-2007-2869: Medium severity Mozilla Firefox vulnerability

Published Jun 1, 2007

Updated

The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in a submitted form.

Affected Software

16 affected components

Mozilla Firefox=1.5

Mozilla Firefox=1.5.0.1

Mozilla Firefox=1.5.0.2

Mozilla Firefox=1.5.0.3

Mozilla Firefox=1.5.0.4

Mozilla Firefox=1.5.0.5

Mozilla Firefox=1.5.0.6

Mozilla Firefox=1.5.0.7

Mozilla Firefox=1.5.0.8

Mozilla Firefox=1.5.0.9

Mozilla Firefox=1.5.0.10

Mozilla Firefox=1.5.0.11

Mozilla Firefox=2.0

Mozilla Firefox=2.0.0.1

Mozilla Firefox=2.0.0.2

Mozilla Firefox=2.0.0.3

Event History

Jun 1, 2007

CVE Published

12:30 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2869?

CVE-2007-2869 is classified as a denial of service vulnerability that can cause persistent CPU consumption.

How do I fix CVE-2007-2869?

To mitigate CVE-2007-2869, upgrade to Mozilla Firefox version 1.5.0.12 or 2.0.0.4 or later.

What versions of Firefox are affected by CVE-2007-2869?

CVE-2007-2869 affects Mozilla Firefox versions 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4.

What can an attacker do with CVE-2007-2869?

An attacker can exploit CVE-2007-2869 to trigger a denial of service by submitting overly large input in forms.

Is CVE-2007-2869 exploitable remotely?

Yes, CVE-2007-2869 can be exploited remotely through the submission of malicious forms in affected Firefox versions.