Is CVE-2007-0009 being actively exploited?

CVE-2007-0009 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2007-0009?

CVE-2007-0009 has a CVSS 2.0 base score of 6.8 (MEDIUM).

CVE-2007-0009

MEDIUM · CVSS 6.8EPSS 50.6%EU EUVD

Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.

Key facts

CVSS score: 6.8 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness (CWE): CWE-119
EPSS score: 50.6% (99th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2007-0013)
Published: February 26, 2007
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-0013 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
debian / debian linux
debian / debian linux
mozilla / firefox
mozilla / network security services
mozilla / seamonkey
mozilla / thunderbird

References

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc(Broken Link)
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc(Broken Link)
http://fedoranews.org/cms/node/2709(Broken Link)
http://fedoranews.org/cms/node/2711(Broken Link)
http://fedoranews.org/cms/node/2747(Broken Link)
http://fedoranews.org/cms/node/2749(Broken Link)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742(Broken Link)
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=483(Broken Link)
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html(Broken Link)
http://rhn.redhat.com/errata/RHSA-2007-0077.html(Third Party Advisory)
http://secunia.com/advisories/24253(Third Party Advisory)
http://secunia.com/advisories/24277(Third Party Advisory)
http://secunia.com/advisories/24287(Third Party Advisory)
http://secunia.com/advisories/24290(Third Party Advisory)
http://secunia.com/advisories/24293(Third Party Advisory)
http://secunia.com/advisories/24333(Third Party Advisory)
http://secunia.com/advisories/24342(Third Party Advisory)
http://secunia.com/advisories/24343(Third Party Advisory)
http://secunia.com/advisories/24384(Third Party Advisory)
http://secunia.com/advisories/24389(Third Party Advisory)
http://secunia.com/advisories/24395(Third Party Advisory)
http://secunia.com/advisories/24406(Third Party Advisory)
http://secunia.com/advisories/24410(Third Party Advisory)
http://secunia.com/advisories/24455(Third Party Advisory)
http://secunia.com/advisories/24456(Third Party Advisory)
http://secunia.com/advisories/24457(Third Party Advisory)
http://secunia.com/advisories/24522(Third Party Advisory)
http://secunia.com/advisories/24562(Third Party Advisory)
http://secunia.com/advisories/24650(Third Party Advisory)
http://secunia.com/advisories/24703(Third Party Advisory)
http://secunia.com/advisories/25588(Third Party Advisory)
http://secunia.com/advisories/25597(Third Party Advisory)
http://security.gentoo.org/glsa/glsa-200703-18.xml(Third Party Advisory)
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131(Mailing List, Third Party Advisory)
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947(Mailing List, Third Party Advisory)
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851(Mailing List, Third Party Advisory)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102856-1(Broken Link)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102945-1(Broken Link)
http://www.debian.org/security/2007/dsa-1336(Third Party Advisory)
http://www.gentoo.org/security/en/glsa/glsa-200703-22.xml(Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain