Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2007-1362

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mozilla Firefox/SeaMonkey/Thunderbird都是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。 Mozilla客户端处理cookie存在两个漏洞。第一个漏洞是没有对cookie路径参数执行任何长度检查，导致受害用户的浏览器可能在运行期间使用过多的内存，浪费过多的磁盘空间存储cookie直至过期。HTTP服务器所发送的Cookie应受HTTP头大小的合理限制，但通过JavaScript所创建并使用document.cookie所添加的cookie可能拥有任意长度的路径

AI Predicted 7.5 Difficulty: Trivial EPSS 7.83% · P95 Updated Feb 27, 2026

Public Exploits 1

ExploitDB · 1 EDB-29720 [dos]

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2007-1362

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Mozilla cookie远程拒绝服务攻击漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2007-1362

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2007-1362

请登录查看更多情报信息。

Vendor Advisories for CVE-2007-1362 (28)

http://www.mozilla.org/security/announce/2007/mfsa2007-14.html x_refsource_CONFIRM
http://www.securityfocus.com/bid/24242 vdb-entry x_refsource_BID
http://secunia.com/advisories/25647 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25858 third-party-advisory x_refsource_SECUNIA
http://osvdb.org/35140 vdb-entry x_refsource_OSVDB
http://www.securityfocus.com/bid/22879 vdb-entry x_refsource_BID
http://secunia.com/advisories/25476 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25533 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25750 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25534 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25490 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25685 third-party-advisory x_refsource_SECUNIA
http://www.osvdb.org/35139 vdb-entry x_refsource_OSVDB
http://secunia.com/advisories/25559 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25635 third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1018162 vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1018163 vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2007/dsa-1300 vendor-advisory x_refsource_DEBIAN
http://www.debian.org/security/2007/dsa-1308 vendor-advisory x_refsource_DEBIAN
🔗 [SECURITY] [DSA 1306-1] New xulrunner packages fix several vulnerabilities Read full article vendor-advisory x_refsource_DEBIAN
http://www.us-cert.gov/cas/techalerts/TA07-151A.html third-party-advisory x_refsource_CERT
http://www.vupen.com/english/advisories/2007/1994 vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 vendor-advisory x_refsource_MANDRIVA
http://security.gentoo.org/glsa/glsa-200706-06.xml vendor-advisory x_refsource_GENTOO
http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 vendor-advisory x_refsource_MANDRIVA
https://exchange.xforce.ibmcloud.com/vulnerabilities/34613 vdb-entry x_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10759 vdb-entry signature x_refsource_OVAL
http://www.securityfocus.com/archive/1/470172/100/200/threaded mailing-list x_refsource_BUGTRAQ

Other References for CVE-2007-1362 (7)

https://issues.rpath.com/browse/RPL-1424 x_refsource_CONFIRM
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 vendor-advisory x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2007-0402.html vendor-advisory x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0400.html vendor-advisory x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0401.html vendor-advisory x_refsource_REDHAT
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 vendor-advisory x_refsource_SLACKWARE
http://www.novell.com/linux/security/advisories/2007_36_mozilla.html vendor-advisory x_refsource_SUSE

https://www.cve.org/CVERecord?id=CVE-2007-1362

Same Patch Batch · n/a · 2007-06-01 · 31 CVEs total

CVE-2007-2974		Avira Antivir中.LZH文件时存在缓冲区溢出漏洞
CVE-2007-2871		Mozilla XUL 地址栏拒绝服务攻击漏洞
CVE-2007-2870		Mozilla addEventListener方式远程拒绝服务攻击漏洞
CVE-2007-2869		Mozilla 表单字符远程拒绝服务攻击漏洞
CVE-2007-2868		Mozilla JavaScript引擎远程拒绝服务攻击漏洞
CVE-2007-2867		Mozilla Web页面表单远程拒绝服务漏洞
CVE-2007-0328		Macrovision FLEXnet Connect软件DWUpdateService控件不安全函数调用漏洞
CVE-2007-2982		British Telecommunications Webhelper ctiveX控件多个缓冲区溢出漏洞
CVE-2007-2981		LEADTOOLS LEAD Raster OCR文档对象库ActiveX控件远程栈溢出漏洞
CVE-2007-2980		LeadTools Raster ISIS对象LTRIS14e.DLL控件远程堆溢出漏洞
CVE-2007-2979		Techno Dreams Web Directory / Search Engine 安全跳过和数据库下载漏洞
CVE-2007-2978		eggblog PHPSESSID参数 web会话劫持漏洞
CVE-2007-2977		DOMjudge 'submitcommon.c'文件缓冲区溢出漏洞
CVE-2007-2976		Centrinity FirstClass %00无效字符跨站脚本攻击漏洞
CVE-2007-2975		Ignite Realtime Openfire管理控制台权限提升漏洞
CVE-2007-2984		Media Technology Group CDPass ActiveX控件栈缓冲区溢出漏洞
CVE-2007-2973		Avira Antivir中存在TAR文件拒绝服务漏洞
CVE-2007-2972		Avira Antivir中UPX压缩文件存在拒绝服务漏洞
CVE-2007-2971		gCards 'getnewsitem.php' SQL注入漏洞
CVE-2007-2970		8e6 R3000 'block.cgi' 跨站脚本攻击漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2007-1362

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2007-1362

Quick assessment

Public Exploits 1

I. Basic Information for CVE-2007-1362

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2007-1362

III. Intelligence Information for CVE-2007-1362

Vendor Advisories for CVE-2007-1362 (28)

Other References for CVE-2007-1362 (7)

Same Patch Batch · n/a · 2007-06-01 · 31 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2007-1362

Leave a comment