CVE-2007-3657

Publication date 10 July 2007

Last updated 4 August 2025

Ubuntu priority

Description

Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by opening multiple tabs in a popup window. NOTE: this issue has been disputed by third party researchers, stating that "this does not crash on me, and I can't see a likely mechanism of action that would lead to a DoS condition.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox	8.10 intrepid	Not in release
	8.04 LTS hardy	Ignored
	7.10 gutsy	Ignored
	7.04 feisty	Ignored end of life, was needed
	6.10 edgy	Ignored end of life, was needed
	6.06 LTS dapper	Ignored

How can I get the fixes?
What do statuses mean?

Notes

jdstrand

click 'pwnd' in the first window, then click 'pwnd' in the popup. firefox goes into a loop opening window after window. marking as ignored-- upstream not interested and we don't consider browser DoS as security vulnerability

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2007-3657