CVE-2007-0777

Name	CVE-2007-0777
Description	The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency
iceape	source	(unstable)	1.0.8-1	high
icedove	source	(unstable)	1.5.0.10.dfsg1-1	low
iceweasel	source	(unstable)	2.0.0.2+dfsg-1	high
xulrunner	source	(unstable)	1.8.0.10-1	high

Notes

MFSA-2007-01
[sarge] - mozilla-firefox <no-dsa> (Mozilla products from Sarge no longer supported)
[sarge] - mozilla-thunderbird <no-dsa> (Mozilla products from Sarge no longer supported)
[sarge] - mozilla <no-dsa> (Mozilla products from Sarge no longer supported)