CVE-2007-0778

Medium

Description

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache.

SeverityMedium
CVSS5.4
Exploit probability—
ProductMozilla Firefox
PublishedFeb 26, 2007
First seenFeb 26, 2007

How to fix

Update
  • mozilla firefox1.5.0.10, 2.0.0.2 or later
  • mozilla seamonkey1.0.8 or later

Affected products

ProductAffected versionsFixed in
mozilla firefox1.5 ≤ v < 1.5.0.10, 2.0 ≤ v < 2.0.0.21.5.0.10, 2.0.0.2
mozilla seamonkeyv < 1.0.81.0.8
canonical ubuntu_linux5.10, 6.06, 6.10—
debian debian_linux3.1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.