Unscored CVE-2007-2162 EUVD-2007-2157GHSA-jv2c-3p5q-6f75

(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a denial of service (browser crash or system hang…

Published Apr 22, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a denial of service (browser crash or system hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.

References

20070418 Re: Internet Explorer Crash mailing-list
20070417 Re: Internet Explorer Crash mailing-list
20070417 Internet Explorer Crash mailing-list