Description
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | mozilla-firefox | 1.0.4-2sarge17 | DSA-1336-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | devhelp +1 | 0.12-10.0.1.el5 | RHSA-2007:0097 |
| RHEL 5 | firefox | 1.5.0.10-2.el5 | RHSA-2007:0097 |
| RHEL 5 | thunderbird | 1.5.0.10-1.el5 | RHSA-2007:0108 |
| RHEL 5 | yelp | 2.16.0-14.0.1.el5 | RHSA-2007:0097 |
| RHEL 4 | devhelp +1 | 0.10-0.7.el4 | RHSA-2007:0077 |
| RHEL 4 | firefox +1 | 1.5.0.10-0.1.el4 | RHSA-2007:0079, RHSA-2007:0078 |
| RHEL 4 | seamonkey +5 | 1.0.8-0.2.el4 | RHSA-2007:0077 |
| RHEL 3 | seamonkey +9 | 1.0.8-0.2.el3 | RHSA-2007:0077 |
| RHEL 2 | seamonkey +9 | 1.0.8-0.2.el2 | RHSA-2007:0077 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 92.0-1.2 | openSUSE-SU-2024:10600-1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 | openSUSE-SU-2024:14572-1 |
Advisories 8
- RHSA-2007:0097 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0078 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0079 Red Hat Security Advisory: Firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0077 Red Hat Security Advisory: seamonkey security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1336-1 mozilla-firefox Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10600-1 MozillaFirefox-92.0-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2007:0108 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2007:0078 vendor-advisory
- 24562 third-party-advisory
- 25597 third-party-advisory
- GLSA-200703-22 vendor-advisory
- FEDORA-2007-278 vendor-advisory
- 24703 third-party-advisory
- 24395 third-party-advisory
- 20070223 Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability third-party-advisory
- 20070226 rPSA-2007-0040-1 firefox mailing-list
- FEDORA-2007-308 vendor-advisory
- RHSA-2007:0108 vendor-advisory
- 24277 third-party-advisory
- SSA:2007-066-03 vendor-advisory
- 24384 third-party-advisory
- 24406 third-party-advisory
- 24457 third-party-advisory
- 24253 third-party-advisory
- MDKSA-2007:052 vendor-advisory
- 24343 third-party-advisory
- DSA-1336 vendor-advisory
- VU#592796 third-party-advisory
- HPSBUX02153 vendor-advisory
- ADV-2007-1165 vdb-entry
- 1017696 vdb-entry
- 102945 vendor-advisory
- ADV-2007-0718 vdb-entry
- FEDORA-2007-279 vendor-advisory
- FEDORA-2007-309 vendor-advisory
- GLSA-200703-18 vendor-advisory
- 24650 third-party-advisory
- USN-428-1 vendor-advisory
- 25588 third-party-advisory
- https://issues.rpath.com/browse/RPL-1103
- SUSE-SA:2007:019 vendor-advisory
- 20070303 rPSA-2007-0040-3 firefox thunderbird mailing-list
- SUSE-SA:2007:022 vendor-advisory
- 24293 third-party-advisory
- SSA:2007-066-04 vendor-advisory
- 24456 third-party-advisory
- http://www.mozilla.org/security/announce/2007/mfsa2007-06.html
- 24342 third-party-advisory
- 24287 third-party-advisory
- 24522 third-party-advisory
- 102856 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=364323
- ADV-2007-0719 vdb-entry
- USN-431-1 vendor-advisory
- RHSA-2007:0097 vendor-advisory
- oval:org.mitre.oval:def:10174 vdb-entry signature
- 24389 third-party-advisory
- https://issues.rpath.com/browse/RPL-1081
- 24410 third-party-advisory
- 32106 vdb-entry
- 24333 third-party-advisory
- nss-clientmasterkey-bo(32663) vdb-entry
- ADV-2007-2141 vdb-entry
- MDKSA-2007:050 vendor-advisory
- 64758 vdb-entry
- 24290 third-party-advisory
- 24455 third-party-advisory