CVE-2007-2671: Mozilla Firefox

High severity, CVSS 7.1. EPSS: 3.2% chance of exploitation in the next 30 days.

Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access.

Affected products

• Mozilla Firefox: version 2.0.0.3 only

Published 2007-05-14. Last modified 2026-06-16.