CVE-2007-5338 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2007-5338
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-5338

Description: Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/37288 UBUNTU http://www.ubuntu.com/usn/usn-536-1 http://www.ubuntulinux.org/support/documentation/usn/usn-535-1 SUSE http://www.novell.com/linux/security/advisories/2007_57_mozilla.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 ST 1018836 SAID Secunia Advisory: SA27665 Secunia Advisory: SA27336 Secunia Advisory: SA27315 Secunia Advisory: SA27311 Secunia Advisory: SA27298 Secunia Advisory: SA27387 Secunia Advisory: SA27480 Secunia Advisory: SA27403 Secunia Advisory: SA27425 Secunia Advisory: SA27383 Secunia Advisory: SA27356 Secunia Advisory: SA27335 Secunia Advisory: SA27327 Secunia Advisory: SA27325 Secunia Advisory: SA27276 Secunia Advisory: SA27414 Secunia Advisory: SA27680 Secunia Advisory: SA27360 Secunia Advisory: SA28398 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0981.html http://www.redhat.com/support/errata/RHSA-2007-0980.html http://www.redhat.com/support/errata/RHSA-2007-0979.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10965 MANDRIVA http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml FEDORA DEBIAN http://www.debian.org/security/2007/dsa-1401 http://www.debian.org/security/2007/dsa-1392 http://www.debian.org/security/2007/dsa-1396 CONFIRM http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html http://www.mozilla.org/security/announce/2007/mfsa2007-35.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/482932/100/200/threaded http://www.securityfocus.com/archive/1/archive/1/482876/100/200/threaded http://www.securityfocus.com/archive/1/archive/1/482925/100/0/threaded BID 26132

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability