Description
The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in a submitted form.
Published: 2007-06-01
Score: 4.3 Medium
EPSS: 16.4% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-1306-1 New xulrunner packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1308-1 New iceweasel packages fix several vulnerabilities
Ubuntu USN Ubuntu USN USN-468-1 Firefox vulnerabilities
References
Link Providers
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 cve-icon cve-icon
http://osvdb.org/35135 cve-icon cve-icon
http://secunia.com/advisories/25476 cve-icon cve-icon
http://secunia.com/advisories/25490 cve-icon cve-icon
http://secunia.com/advisories/25533 cve-icon cve-icon
http://secunia.com/advisories/25534 cve-icon cve-icon
http://secunia.com/advisories/25635 cve-icon cve-icon
http://secunia.com/advisories/25647 cve-icon cve-icon
http://secunia.com/advisories/25685 cve-icon cve-icon
http://secunia.com/advisories/25750 cve-icon cve-icon
http://secunia.com/advisories/25858 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200706-06.xml cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1306 cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1308 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 cve-icon cve-icon
http://www.mozilla.org/security/announce/2007/mfsa2007-13.html cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2007_36_mozilla.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0400.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0401.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0402.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/470172/100/200/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/24242 cve-icon cve-icon
http://www.securitytracker.com/id?1018154 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-468-1 cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA07-151A.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/1994 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/34612 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1424 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-2869 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11208 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-2869 cve-icon
History

No history.

Subscriptions

Mozilla Firefox
Redhat Enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-07T13:57:53.959Z

Reserved: 2007-05-29T00:00:00.000Z

Link: CVE-2007-2869

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-06-01T00:30:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2007-2869

cve-icon Redhat

Severity : Low

Publid Date: 2007-05-31T00:00:00Z

Links: CVE-2007-2869 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses