CVE-2007-3738 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.
HighCVSS 9.3
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 2.0 | No fix listed |
| mozilla Firefox | = 2.0.0.1 | No fix listed |
| mozilla Firefox | = 2.0.0.2 | No fix listed |
| mozilla Firefox | = 2.0.0.3 | No fix listed |
| mozilla Firefox | = 2.0.0.4 | No fix listed |
References
- HPSBUX02153 vendor-advisory
- 25589 third-party-advisory
- 26072 third-party-advisory
- 26095 patch third-party-advisory vendor-advisory
- 26103 third-party-advisory
- 26106 third-party-advisory
- 26107 third-party-advisory
- 26149 third-party-advisory
- 26151 third-party-advisory
- 26159 third-party-advisory
- 26179 third-party-advisory
- 26204 third-party-advisory
- 26205 third-party-advisory
- 26211 third-party-advisory
- 26216 third-party-advisory
- 26258 third-party-advisory
- 26271 third-party-advisory
- 26460 third-party-advisory
- 28135 third-party-advisory
- 103177 vendor-advisory
- 201516 vendor-advisory
- support.novell.com
- DSA-1337 vendor-advisory
- DSA-1338 vendor-advisory
- DSA-1339 vendor-advisory
- GLSA-200708-09 vendor-advisory
- MDKSA-2007:152 vendor-advisory
- www.mozilla.org vendor-advisory
- SUSE-SA:2007:049 vendor-advisory
- SUSE-SA:2007:057 vendor-advisory
- RHSA-2007:0722 vendor-advisory
- RHSA-2007:0723 vendor-advisory
- RHSA-2007:0724 vendor-advisory
- 20070720 rPSA-2007-0148-1 firefox thunderbird mailing-list
- 20070724 FLEA-2007-0033-1: firefox thunderbird mailing-list
- 24946 vdb-entry
- 1018414 vdb-entry
- USN-490-1 vendor-advisory
- ADV-2007-2564 vdb-entry
- ADV-2007-4256 vdb-entry
- firefox-xpcnativewrapper-code-execution(35460) vdb-entry
- oval:org.mitre.oval:def:9875 signature vdb-entry