CVE-2007-5896

Publication date 8 November 2007

Last updated 24 July 2024

Description

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service (CPU consumption and crash) via an iframe with Javascript that sets the document.location to contain a leading NULL byte (\x00) and a (1) res://, (2) about:config, or (3) file:/// URI.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox	8.10 intrepid	Not in release
	8.04 LTS hardy	Ignored
	7.10 gutsy	Ignored
	7.04 feisty	Ignored end of life, was needs-triage
	6.10 edgy	Ignored end of life, was needs-triage
	6.06 LTS dapper	Ignored

How can I get the fixes?
What do statuses mean?

Notes

jdstrand

browser crash is not a security vulnerability

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2007-5896