NVD

Id
57414  
Name
CVE-2007-5338  
Description
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-21  
Modified Date
2011-03-07  
Seq
2007-5338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293423 57414 CVE-2007-5338 HPSBUX02153  View
293424 57414 CVE-2007-5338 oval:org.mitre.oval:def:10965  View
293425 57414 CVE-2007-5338 1018836  View
293426 57414 CVE-2007-5338 201516  View
293427 57414 CVE-2007-5338 http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html  View
293428 57414 CVE-2007-5338 DSA-1392  View
293429 57414 CVE-2007-5338 DSA-1396  View
293430 57414 CVE-2007-5338 DSA-1401  View
293431 57414 CVE-2007-5338 GLSA-200711-14  View
293432 57414 CVE-2007-5338 MDKSA-2007:202  View
293433 57414 CVE-2007-5338 http://www.mozilla.org/security/announce/2007/mfsa2007-35.html  View
293434 57414 CVE-2007-5338 SUSE-SA:2007:057  View
293435 57414 CVE-2007-5338 RHSA-2007:0979  View
293436 57414 CVE-2007-5338 RHSA-2007:0980  View
293437 57414 CVE-2007-5338 RHSA-2007:0981  View
293438 57414 CVE-2007-5338 20071026 rPSA-2007-0225-1 firefox  View
293439 57414 CVE-2007-5338 20071029 FLEA-2007-0062-1 firefox  View
293440 57414 CVE-2007-5338 20071029 rPSA-2007-0225-2 firefox thunderbird  View
293441 57414 CVE-2007-5338 26132  View
293442 57414 CVE-2007-5338 USN-536-1  View
293443 57414 CVE-2007-5338 USN-535-1  View
293444 57414 CVE-2007-5338 ADV-2007-3544  View
293445 57414 CVE-2007-5338 ADV-2007-3587  View
293446 57414 CVE-2007-5338 ADV-2008-0083  View
293447 57414 CVE-2007-5338 mozilla-xpcnativewrapper-code-execution(37288)  View
293448 57414 CVE-2007-5338 https://issues.rpath.com/browse/RPL-1858  View
293449 57414 CVE-2007-5338 FEDORA-2007-3431  View
293450 57414 CVE-2007-5338 FEDORA-2007-2601  View
293451 57414 CVE-2007-5338 FEDORA-2007-2664  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52199 JVNDB-2007-000889 Mozilla Firefox/SeaMonkey における JavaScript を実行される脆弱性 Mozilla Firefox および SeaMonkey には、スクリプトオブジェクトを利用して XPCNativeWrappers を変更されることで、ユーザの権限で任意の JavaScript を実行される脆弱性が存在します。 CVE-2007-5338 28693 CVE-2007-5338 57414 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000889.html 2007-10-18 2008-01-23 View