CVE-2007-3737 Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."
HighCVSS 9.3
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 2.0 | No fix listed |
| mozilla Firefox | = 2.0.0.1 | No fix listed |
| mozilla Firefox | = 2.0.0.2 | No fix listed |
| mozilla Firefox | = 2.0.0.3 | No fix listed |
| mozilla Firefox | = 2.0.0.4 | No fix listed |
References
- HPSBUX02153 vendor-advisory
- 25589 third-party-advisory
- 26072 third-party-advisory
- 26095 patch third-party-advisory vendor-advisory
- 26103 third-party-advisory
- 26106 third-party-advisory
- 26107 third-party-advisory
- 26149 third-party-advisory
- 26151 third-party-advisory
- 26159 third-party-advisory
- 26179 third-party-advisory
- 26204 third-party-advisory
- 26205 third-party-advisory
- 26211 third-party-advisory
- 26216 third-party-advisory
- 26258 third-party-advisory
- 26271 third-party-advisory
- 26460 third-party-advisory
- 28135 third-party-advisory
- 103177 vendor-advisory
- 201516 vendor-advisory
- support.novell.com
- DSA-1337 vendor-advisory
- DSA-1338 vendor-advisory
- DSA-1339 vendor-advisory
- GLSA-200708-09 vendor-advisory
- MDKSA-2007:152 vendor-advisory
- www.mozilla.org vendor-advisory
- SUSE-SA:2007:049 vendor-advisory
- RHSA-2007:0722 vendor-advisory
- RHSA-2007:0723 vendor-advisory
- RHSA-2007:0724 vendor-advisory
- 20070720 rPSA-2007-0148-1 firefox thunderbird mailing-list
- 20070724 FLEA-2007-0033-1: firefox thunderbird mailing-list
- 24946 vdb-entry
- 1018409 vdb-entry
- USN-490-1 vendor-advisory
- ADV-2007-2564 vdb-entry
- ADV-2007-4256 vdb-entry
- firefox-eventhandler-code-execution(35461) vdb-entry
- oval:org.mitre.oval:def:10009 signature vdb-entry