Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-1092
HistoryFeb 26, 2007 - 5:28 p.m.

CVE-2007-1092

2007-02-2617:28:00
mitre
web.nvd.nist.gov
43
cve-2007-1092
mozilla firefox
seamonkey
remote code execution
javascript
memory corruption
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.967

Percentile

99.7%

JSON

Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.

Affected configurations

Nvd
Node
mozillafirefoxMatch1.5.0.9
OR
mozillafirefoxMatch2.0.0.1
OR
mozillaseamonkeyRange≤1.0.7
VendorProductVersionCPE
mozillafirefox1.5.0.9cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*
mozillafirefox2.0.0.1cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

References

Related

nvd 2
cvelist 2
prion 2
cert 1
mozilla 1
securityvulns 2
ubuntucve 2
cve 1
openvas 12
nessus 17
freebsd 1
oraclelinux 3
redhat 3
ubuntu 2
centos 5
suse 2
nvd
nvd
CVE-2007-1092
2007-02-26 17:28:00
CVE-2007-1256
2007-03-03 20:19:00
cvelist
cvelist
CVE-2007-1092
2007-02-26 17:00:00
CVE-2007-1256
2007-03-03 20:00:00
prion
prion
Memory corruption
2007-02-26 17:28:00
Design/Logic Flaw
2007-03-03 20:19:00
cert
cert
Mozilla Firefox fails to properly handle JavaScript onUnload events
2007-02-23 00:00:00
mozilla
mozilla
onUnload + document.write() memory corruption — Mozilla
2007-02-25 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-08
2007-02-27 00:00:00
Multiple browsers OnUnload event handler different vulnerabilities
2007-02-28 00:00:00
ubuntucve
ubuntucve
CVE-2007-1092
2007-02-26 00:00:00
CVE-2007-1256
2007-03-03 00:00:00
cve
cve
CVE-2007-1256
2007-03-03 20:19:00
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:050-1 (mozilla-firefox)
2009-04-09 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (12bd6ecf-c430-11db-95c5-000c6ec775d9)
2007-02-26 00:00:00
RHEL 4 : Firefox (RHSA-2007:0079)
2007-02-26 00:00:00
Oracle Linux 4 : Firefox (ELSA-2007-0079)
2013-07-12 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
oraclelinux
oraclelinux
Critical: Firefox security update
2007-02-24 00:00:00
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
redhat
redhat
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
(RHSA-2007:0078) Critical: thunderbird security update
2007-03-02 00:00:00
(RHSA-2007:0077) Critical: seamonkey security update
2007-02-23 00:00:00
ubuntu
ubuntu
Firefox regression
2007-03-02 00:00:00
Firefox vulnerabilities
2007-03-01 00:00:00
centos
centos
firefox security update
2007-02-24 13:53:25
thunderbird security update
2007-03-04 11:06:21
devhelp, seamonkey security update
2007-02-24 14:49:37
suse
suse
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.967

Percentile

99.7%

JSON
Related for CVE-2007-1092
nvd2cvelist2prion2cert1mozilla1securityvulns2ubuntucve2cve1openvas12nessus17freebsd1oraclelinux3redhat3ubuntu2centos5suse2