9.3
CVSSv2

CVE-2007-3738

Published: 18/07/2007 Updated: 15/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Multiple unspecified vulnerabilities in Mozilla Firefox prior to 2.0.0.5 allow remote malicious users to execute arbitrary code via a crafted XPCNativeWrapper.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 2.0

mozilla firefox 2.0.0.1

mozilla firefox 2.0.0.2

mozilla firefox 2.0.0.3

mozilla firefox 2.0.0.4

Vendor Advisories

Various flaws were discovered in the layout and JavaScript engines By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user’s privileges (CVE-2007-3734, CVE-2007-3735) ...
Mozilla Foundation Security Advisory 2007-25 XPCNativeWrapper pollution Announced July 17, 2007 Reporter shutdown and moz_bug_r_a4 Impact Moderate Products Firefox, SeaMonkey Fixed in ...
Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into abou ...
Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into about:blank f ...
Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-4879 Peter Brodersen and Alexander Klink discovered that the autoselection of SSL client certificates could lead to users being tracke ...
Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1233 moz_bug_r_a4 discovered that variants of CVE-2007-3738 and CVE-2007-5338 allow the execution of arbitrary code thro ...
Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3089 Ronen Zilberman and Michal Zalewski discovered that a timing race allows the injection of content into about:blank frames CVE-2007-3 ...
Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-4879 Peter Brodersen and Alexander Klink discovered that the autoselection of SSL client certificates could lead ...
Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-4879 Peter Brodersen and Alexander Klink discovered that the autoselection of SSL client certificates could lead to users ...

References

NVD-CWE-noinfohttp://www.mozilla.org/security/announce/2007/mfsa2007-25.htmlhttp://secunia.com/advisories/26095ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txthttp://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.htmlhttp://www.debian.org/security/2007/dsa-1337http://www.debian.org/security/2007/dsa-1338http://www.debian.org/security/2007/dsa-1339http://www.gentoo.org/security/en/glsa/glsa-200708-09.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:152http://www.redhat.com/support/errata/RHSA-2007-0722.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0723.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0724.htmlftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.aschttp://www.novell.com/linux/security/advisories/2007_49_mozilla.htmlhttp://www.novell.com/linux/security/advisories/2007_57_mozilla.htmlhttp://www.ubuntu.com/usn/usn-490-1http://www.securityfocus.com/bid/24946http://www.securitytracker.com/id?1018414http://secunia.com/advisories/26103http://secunia.com/advisories/26106http://secunia.com/advisories/26107http://secunia.com/advisories/25589http://secunia.com/advisories/26179http://secunia.com/advisories/26149http://secunia.com/advisories/26151http://secunia.com/advisories/26072http://secunia.com/advisories/26211http://secunia.com/advisories/26216http://secunia.com/advisories/26204http://secunia.com/advisories/26205http://secunia.com/advisories/26159http://secunia.com/advisories/26271http://secunia.com/advisories/26258http://secunia.com/advisories/26460http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1http://secunia.com/advisories/28135http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1http://www.vupen.com/english/advisories/2007/4256http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742http://www.vupen.com/english/advisories/2007/2564https://exchange.xforce.ibmcloud.com/vulnerabilities/35460https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9875http://www.securityfocus.com/archive/1/474542/100/0/threadedhttp://www.securityfocus.com/archive/1/474226/100/0/threadedhttps://usn.ubuntu.com/490-1/https://nvd.nist.gov