CVE-2007-5340: mozilla firefox Improper Input Validation

Modified

Published 21-10-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-5340 is a medium (CVSS 4.3) Improper Input Validation vulnerability in mozilla firefox. EPSS estimates a 3.43% chance of exploitation in the next 30 days, higher than 88.9% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

3.43%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10

DSA-1391-1 DSA-1392-1 DSA-1396-1 DSA-1401-1 DTSA-69-1 DTSA-71-1+4 more

Timeline

21-10-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

3.43%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.43% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Mozilla3 products

firefox≤ 2.0.0.7
seamonkey≤ 1.1.4
thunderbird≤ 2.0.0.6

1 vendor · 3 products

References

71 links

www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/archive/1/482876/100/200/threadedMailing ListX Refsource BUGTRAQ
www.mozilla.org/security/announce/2007/mfsa2007-29.htmlX Refsource CONFIRMPatch
securitytracker.com/id?1018835VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2007/3545VDB EntryX Refsource VUPEN
www.mandriva.com/security/advisories?name=MDVSA-2008:047Vendor AdvisoryX Refsource MANDRIVA
www.kb.cert.org/vuls/id/755513Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.vupen.com/english/advisories/2007/3587VDB EntryX Refsource VUPEN
secunia.com/advisories/27414Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/suse_security_summary_report.htmlVendor AdvisoryX Refsource SUSE

Show all 71 references

www.securityfocus.com/archive/1/482925/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2008/0643VDB EntryX Refsource VUPEN
issues.rpath.com/browse/RPL-1858X Refsource CONFIRM
www.gentoo.org/security/en/glsa/glsa-200711-14.xmlVendor AdvisoryX Refsource GENTOO
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579Vendor AdvisoryX Refsource HP
secunia.com/advisories/27360Third Party AdvisoryX Refsource SECUNIA
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742Vendor AdvisoryX Refsource HP
secunia.com/advisories/27298Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27315Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27327Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/3544VDB EntryX Refsource VUPEN
secunia.com/advisories/27276Third Party AdvisoryX Refsource SECUNIA
usn.ubuntu.com/535-1/Vendor AdvisoryX Refsource UBUNTU
www.debian.org/security/2007/dsa-1391Vendor AdvisoryX Refsource DEBIAN
security.gentoo.org/glsa/glsa-200711-24.xmlVendor AdvisoryX Refsource GENTOO
bugzilla.mozilla.org/buglist.cgi?bug_id=372309%2C387955%2C390078%2C393537X Refsource MISC
secunia.com/advisories/28179Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1Vendor AdvisoryX Refsource SUNALERT
securitytracker.com/id?1018834VDB EntryX Refsource SECTRACK
www.debian.org/security/2007/dsa-1401Vendor AdvisoryX Refsource DEBIAN
www.debian.org/security/2007/dsa-1392Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2007-0980.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/27383Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2007_57_mozilla.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDVSA-2007:047Vendor AdvisoryX Refsource MANDRIVA
exchange.xforce.ibmcloud.com/vulnerabilities/37282VDB EntryX Refsource XF
secunia.com/advisories/27356Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9622VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2007-0981.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/27704Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPEN
secunia.com/advisories/27387Third Party AdvisoryX Refsource SECUNIA
bugs.gentoo.org/show_bug.cgi?id=196481X Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27313Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27403Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27336Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0082VDB EntryX Refsource VUPEN
sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1Vendor AdvisoryX Refsource SUNALERT
www.debian.org/security/2007/dsa-1396Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/27425Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28398Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/4272VDB EntryX Refsource VUPEN
secunia.com/advisories/27311Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27325Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/en/security/advisories?name=MDKSA-2007:202Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/27665Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0979.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/27335Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-1884X Refsource CONFIRM
secunia.com/advisories/28636Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27326Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/28363Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27480Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27680Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/26132VDB EntryX Refsource BID
support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.htmlX Refsource CONFIRM
sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1Vendor AdvisoryX Refsource SUNALERT
www.securityfocus.com/archive/1/482932/100/200/threadedMailing ListX Refsource BUGTRAQ
www.ubuntu.com/usn/usn-536-1Vendor AdvisoryX Refsource UBUNTU