CVE-2007-5338 Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way th...
HighCVSS 9.3
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 2.0.0.7 | No fix listed |
| mozilla seamonkey | <= 1.1.4 | No fix listed |
References
- HPSBUX02153 vendor-advisory
- 27276 third-party-advisory vendor-advisory
- 27298 third-party-advisory vendor-advisory
- 27311 third-party-advisory vendor-advisory
- 27315 third-party-advisory vendor-advisory
- 27325 third-party-advisory vendor-advisory
- 27327 third-party-advisory vendor-advisory
- 27335 third-party-advisory vendor-advisory
- 27336 third-party-advisory vendor-advisory
- 27356 third-party-advisory vendor-advisory
- 27360 third-party-advisory vendor-advisory
- 27383 third-party-advisory vendor-advisory
- 27387 third-party-advisory vendor-advisory
- 27403 third-party-advisory vendor-advisory
- 27414 third-party-advisory vendor-advisory
- 27425 third-party-advisory vendor-advisory
- 27480 third-party-advisory vendor-advisory
- 27665 third-party-advisory vendor-advisory
- 27680 third-party-advisory vendor-advisory
- 28398 third-party-advisory vendor-advisory
- 1018836 vdb-entry
- 201516 vendor-advisory
- support.novell.com
- DSA-1392 vendor-advisory
- DSA-1396 vendor-advisory
- DSA-1401 vendor-advisory
- GLSA-200711-14 vendor-advisory
- MDKSA-2007:202 vendor-advisory
- www.mozilla.org patch
- SUSE-SA:2007:057 vendor-advisory
- RHSA-2007:0979 vendor-advisory
- RHSA-2007:0980 vendor-advisory
- RHSA-2007:0981 vendor-advisory
- 20071026 rPSA-2007-0225-1 firefox mailing-list
- 20071029 FLEA-2007-0062-1 firefox mailing-list
- 20071029 rPSA-2007-0225-2 firefox thunderbird mailing-list
- 26132 vdb-entry
- USN-536-1 vendor-advisory
- ADV-2007-3544 vdb-entry vendor-advisory
- ADV-2007-3587 vdb-entry vendor-advisory
- ADV-2008-0083 vdb-entry vendor-advisory
- mozilla-xpcnativewrapper-code-execution(37288) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10965 signature vdb-entry
- USN-535-1 vendor-advisory
- FEDORA-2007-3431 vendor-advisory
- FEDORA-2007-2601 vendor-advisory
- FEDORA-2007-2664 vendor-advisory