Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8…
Priority LOW 26CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption or assert errors.
Why it matters now
EPSS 0.0343 89th percentileScored 2026-11-07
Fix Fixed Red Hat: 3 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
Red Hat 3 advisories
- RHSA-2007:0980 Released 2007-10-19 · Red Hat rating Criticalseamonkey security update
- Red Hat Desktop version 3 seamonkey-1.0.9-0.5.el3, seamonkey-1.0.9-0.5.el3.i386, seamonkey-chat-1.0.9-0.5.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.6.el2, seamonkey-1.0.9-0.6.el2.i386, seamonkey-1.0.9-0.6.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.5.el3, seamonkey-1.0.9-0.5.el3.i386, seamonkey-1.0.9-0.5.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-6.el4, seamonkey-1.0.9-6.el4.i386, seamonkey-1.0.9-6.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-6.el4, seamonkey-1.0.9-6.el4.i386, seamonkey-chat-1.0.9-6.el4 +9
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.6.el2, seamonkey-1.0.9-0.6.el2.i386, seamonkey-chat-1.0.9-0.6.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.5.el3, seamonkey-1.0.9-0.5.el3.i386, seamonkey-1.0.9-0.5.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-6.el4, seamonkey-1.0.9-6.el4.i386, seamonkey-1.0.9-6.el4.ia64 +15
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.6.el2, seamonkey-1.0.9-0.6.el2.i386, seamonkey-chat-1.0.9-0.6.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.5.el3, seamonkey-1.0.9-0.5.el3.i386, seamonkey-1.0.9-0.5.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-6.el4, seamonkey-1.0.9-6.el4.i386, seamonkey-1.0.9-6.el4.ia64 +15
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.6.el2, seamonkey-1.0.9-0.6.el2.ia64, seamonkey-chat-1.0.9-0.6.el2.ia64 +8
- RHSA-2007:0981 Released 2007-10-19 · Red Hat rating Moderatethunderbird security update
- Red Hat Enterprise Linux AS version 4 thunderbird-1.5.0.12-0.5.el4, thunderbird-1.5.0.12-0.5.el4.i386, thunderbird-1.5.0.12-0.5.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-1.5.0.12-5.el5, thunderbird-1.5.0.12-5.el5.i386
- Red Hat Enterprise Linux Desktop version 4 thunderbird-1.5.0.12-0.5.el4, thunderbird-1.5.0.12-0.5.el4.i386
- Red Hat Enterprise Linux ES version 4 thunderbird-1.5.0.12-0.5.el4, thunderbird-1.5.0.12-0.5.el4.i386, thunderbird-1.5.0.12-0.5.el4.ia64
- Red Hat Enterprise Linux WS version 4 thunderbird-1.5.0.12-0.5.el4, thunderbird-1.5.0.12-0.5.el4.i386, thunderbird-1.5.0.12-0.5.el4.ia64
- RHSA-2007:0979 Released 2007-10-19 · Red Hat rating Criticalfirefox security update
- Red Hat Enterprise Linux (v. 5 server) firefox-1.5.0.12-6.el5, firefox-1.5.0.12-6.el5.i386, firefox-1.5.0.12-6.el5.ia64 +1
- Red Hat Enterprise Linux AS version 4 firefox-1.5.0.12-0.7.el4, firefox-1.5.0.12-0.7.el4.i386, firefox-1.5.0.12-0.7.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-1.5.0.12-6.el5, firefox-1.5.0.12-6.el5.i386
- Red Hat Enterprise Linux Desktop version 4 firefox-1.5.0.12-0.7.el4, firefox-1.5.0.12-0.7.el4.i386
- Red Hat Enterprise Linux ES version 4 firefox-1.5.0.12-0.7.el4, firefox-1.5.0.12-0.7.el4.i386, firefox-1.5.0.12-0.7.el4.ia64
- Red Hat Enterprise Linux WS version 4 firefox-1.5.0.12-0.7.el4, firefox-1.5.0.12-0.7.el4.i386, firefox-1.5.0.12-0.7.el4.ia64
Vendor assessments
Red Hat
Red Hat rating: Critical. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2007:0980 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2007:0979 |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | Fixed | RHSA-2007:0980 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2007:0980 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2007:0979, RHSA-2007:0980, RHSA-2007:0981 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2007:0979, RHSA-2007:0981 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2007:0979, RHSA-2007:0980, RHSA-2007:0981 |
| Red Hat Enterprise Linux ES version 2.1 | Fixed | RHSA-2007:0980 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2007:0980 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2007:0979, RHSA-2007:0980, RHSA-2007:0981 |
| Red Hat Enterprise Linux WS version 2.1 | Fixed | RHSA-2007:0980 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2007:0980 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2007:0979, RHSA-2007:0980, RHSA-2007:0981 |
| Red Hat Linux Advanced Workstation 2.1 | Fixed | RHSA-2007:0980 |
Timeline
- 2026-10-02 Threatist record created from CVE-2007-5339
- 2026-10-03 Alias added: GHSA-2v9q-c3g9-f96r
References
Advisory 26
- FEDORA-2007-2601
- MDVSA-2008:047
- SUSE-SR:2008:002
- GLSA-200711-14
- HPSBUX02156
- HPSBUX02153
- USN-535-1
- DSA-1391
- GLSA-200711-24
- 1018977
- VU#559977
- DSA-1401
- DSA-1392
- SSA:2007-324-01
- RHSA-2007:0980
- SUSE-SA:2007:057
- MDVSA-2007:047
- RHSA-2007:0981
- FEDORA-2007-3431
- 231441
- DSA-1396
- MDKSA-2007:202
- RHSA-2007:0979
- FEDORA-2007-2664
- 201516
- USN-536-1
Other 13
- ADV-2007-3545
- ADV-2007-3587
- ADV-2008-0643
- https://issues.rpath.com/browse/RPL-1858
- oval:org.mitre.oval:def:10459
- ADV-2007-3544
- ADV-2008-0083
- http://bugs.gentoo.org/show_bug.cgi?id=196481
- ADV-2008-0082
- ADV-2007-4272
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=309322%2C330563%2C341858%2C344064%2C348126%2C354645%2C361745%2C362901%2C378670%2C378682%2C379799%2C382376%2C384105%2C386382%2C386914%2C387033%2C387460%2C387844%2C391974%2C392285%2C393770%2C394014%2C394418
- https://issues.rpath.com/browse/RPL-1884
- http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
More Mozilla Firefox vulnerabilities
- TI-2024-08981 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.8
- TI-2022-09832 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.6
- TI-2019-08769 Improper input validation in Mozilla Firefox ESR KEVCVSS 3.1CRITICAL 10.0
- TI-2010-03577 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… KEVCVSS 3.1CRITICAL 9.8
- TI-2023-04799 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
- TI-2023-04477 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2007-5339 · CVE Program
- CVE-2007-5339 · NVD
- FIRST EPSS
- GHSA-2v9q-c3g9-f96r · GitHub Advisory Database · CC BY 4.0
- CVE-2007-5339 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences