9.8
CVSSv3

CVE-2003-0791

Published: 07/10/2003 Updated: 25/01/2024
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and previous versions allows malicious users to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla mozilla

sco openserver 5.0.7