CVE-2007-5691

ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2007-10-29

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Firefox (Mozilla)

References

• http://osvdb.org/43609
• http://securityreason.com/securityalert/3319
• http://www.eleytt.com/advisories/eleytt_FFPARSEFTPLIST.pdf
• http://www.securityfocus.com/archive/1/482597/100/0/threaded
• http://www.securityfocus.com/bid/26159
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37334