9.3
CVSSv2

CVE-2007-3737

Published: 18/07/2007 Updated: 15/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Mozilla Firefox prior to 2.0.0.5 allows remote malicious users to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 2.0.0.3

mozilla firefox 2.0.0.4

mozilla firefox 2.0

mozilla firefox 2.0.0.1

mozilla firefox 2.0.0.2

Vendor Advisories

Various flaws were discovered in the layout and JavaScript engines By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user’s privileges (CVE-2007-3734, CVE-2007-3735) ...
Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into abou ...
Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into about:blank f ...
Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into about:blank frames CVE-2007-3 ...
Mozilla Foundation Security Advisory 2007-21 Privilege escallation using an event handler attached to an element not in the document Announced July 17, 2007 Reporter moz_bug_r_a4 Impact Critical Products Firefox, SeaMonkey ...

References

NVD-CWE-noinfohttp://www.mozilla.org/security/announce/2007/mfsa2007-21.htmlhttp://secunia.com/advisories/26095ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txthttp://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.htmlhttp://www.debian.org/security/2007/dsa-1337http://www.debian.org/security/2007/dsa-1338http://www.debian.org/security/2007/dsa-1339http://www.gentoo.org/security/en/glsa/glsa-200708-09.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:152http://www.redhat.com/support/errata/RHSA-2007-0722.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0723.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0724.htmlftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.aschttp://www.novell.com/linux/security/advisories/2007_49_mozilla.htmlhttp://www.ubuntu.com/usn/usn-490-1http://www.securityfocus.com/bid/24946http://www.securitytracker.com/id?1018409http://secunia.com/advisories/26103http://secunia.com/advisories/26106http://secunia.com/advisories/26107http://secunia.com/advisories/25589http://secunia.com/advisories/26179http://secunia.com/advisories/26149http://secunia.com/advisories/26151http://secunia.com/advisories/26072http://secunia.com/advisories/26211http://secunia.com/advisories/26216http://secunia.com/advisories/26204http://secunia.com/advisories/26205http://secunia.com/advisories/26159http://secunia.com/advisories/26271http://secunia.com/advisories/26258http://secunia.com/advisories/26460http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1http://secunia.com/advisories/28135http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1http://www.vupen.com/english/advisories/2007/4256http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742http://www.vupen.com/english/advisories/2007/2564https://exchange.xforce.ibmcloud.com/vulnerabilities/35461https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10009http://www.securityfocus.com/archive/1/474542/100/0/threadedhttp://www.securityfocus.com/archive/1/474226/100/0/threadedhttps://usn.ubuntu.com/490-1/https://nvd.nist.gov