CVE-2007-0777: Canonical Ubuntu Linux

High severity, CVSS 9.3. EPSS: 7.6% chance of exploitation in the next 30 days.

The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.

Affected products

• Canonical Ubuntu Linux: version 5.10 only; version 6.06 only; version 6.10 only
• Mozilla Firefox: from 1.5, before 1.5.0.10 (fixed in 1.5.0.10); from 2.0, before 2.0.0.2 (fixed in 2.0.0.2)
• Mozilla Seamonkey: before 1.0.8 (fixed in 1.0.8)
• Mozilla Thunderbird: before 1.5.0.10 (fixed in 1.5.0.10)

Published 2007-02-26. Last modified 2026-06-16.