CVE-2007-2162: GNU Iceweasel

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a denial of service (browser crash or system hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.

Affected products

• GNU Iceweasel: version 2.0.0.3 only
• Mozilla Firefox: version 2.0.0.3 only

Published 2007-04-22. Last modified 2026-06-16.