CVE-2007-1794

Опубликовано: 02 апр. 2007

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805.

Ссылки

http://secunia.com/advisories/24624
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2007/1178
http://secunia.com/advisories/24624
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2007/1178

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:sun:solaris:10.0:hw2:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*

Версия до 1.7 (включая)

EPSS

Процентиль: 87%

0.03447

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2007-1794

debian

больше 18 лет назад

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, ...

GHSA-whc6-8wvp-96v2

github

больше 3 лет назад