NVD

Id
53018  
Name
CVE-2007-0801  
Description
The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-02-07  
Modified Date
2008-09-05  
Seq
2007-0801  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268165 53018 CVE-2007-0801 GLSA-200703-04  View
268166 53018 CVE-2007-0801 GLSA-200703-08  View
268167 53018 CVE-2007-0801 20070205 Re: [Full-disclosure] Firefox + popup blocker + XMLHttpRequest + srand() = oops  View
268168 53018 CVE-2007-0801 20070205 Firefox + popup blocker + XMLHttpRequest + srand() = oops  View
268169 53018 CVE-2007-0801 22396  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54643 JVNDB-2007-003335 Mozilla Firefox の nsExternalAppHandler::SetUpTempFile 関数における任意の Web スクリプトまたは HTML を実行される脆弱性 Mozilla Firefox の nsExternalAppHandler::SetUpTempFile 関数は、作成時間を基に予測可能なファイル名でテンポラリファイルを作成するため、任意の Web スクリプトまたは HTML を実行される脆弱性が存在します。 CVE-2007-0801 24156 CVE-2007-0801 53018 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003335.html 2007-02-07 2012-09-25 View