10

CVE-2007-1794

EPSS 3.32%
Published 02.04.2007 22:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.  NOTE: this issue might be related to CVE-2006-3805.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Mozilla Version <= 1.7

   Sun ≫ Solaris Version10.0 Updatehw2
   Sun ≫ Sunos Version5.8
   Sun ≫ Sunos Version5.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.32%	0.861

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/24624

Patch

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1178

https://nvd.nist.gov/vuln/detail/CVE-2007-1794

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1794

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1794

EUVD