CVE-2007-2867: Mozilla Firefox

High severity, CVSS 9.3. EPSS: 3.4% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.

Affected products

• Mozilla Firefox: version 1.5 only; version 1.5.0.1 only; version 1.5.0.2 only; version 1.5.0.3 only; version 1.5.0.4 only; version 1.5.0.5 only; …
• Mozilla Seamonkey: version 1.0.3 only; version 1.0.4 only; version 1.0.9 only; version 1.1.2 only
• Mozilla Thunderbird: version 1.5 only; version 1.5.0.1 only; version 1.5.0.2 only; version 1.5.0.3 only; version 1.5.0.4 only; version 1.5.0.6 only; …

Published 2007-06-01. Last modified 2026-06-16.