Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2007-5338

Опубликовано: 21 окт. 2007
Источник: ubuntu
Приоритет: medium
CVSS2: 9.3

Описание

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

РелизСтатусПримечание
dapper

released

1.5.dfsg+1.5.0.14~prepatch071011b-0ubuntu1
devel

not-affected

edgy

released

2.0.0.8+0dfsg-0ubuntu0.6.10
feisty

released

2.0.0.8+1nobinonly-0ubuntu1
gutsy

released

2.0.0.8+2nobinonly-0ubuntu1
upstream

released

2.0.0.8

Показывать по

РелизСтатусПримечание
dapper

released

1.5.0.13+1.5.0.14b-0ubuntu0.6.06
edgy

released

1.5.0.13+1.5.0.14b-0ubuntu0.6.10
feisty

released

1.5.0.13+1.5.0.14b-0ubuntu0.7.04
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

gutsy

released

2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10
upstream

released

2.0.0.8

Показывать по

9.3 Critical

CVSS2

Связанные уязвимости

redhat
больше 18 лет назад

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

nvd
больше 18 лет назад

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

debian
больше 18 лет назад

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote ...

github
почти 4 года назад

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

oracle-oval
больше 18 лет назад

ELSA-2007-0979: Critical: firefox security update (CRITICAL)

9.3 Critical

CVSS2