10

CVE-2007-1794

EPSS 3.32%
Veröffentlicht 02.04.2007 22:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.  NOTE: this issue might be related to CVE-2006-3805.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Mozilla Version <= 1.7

   Sun ≫ Solaris Version10.0 Updatehw2
   Sun ≫ Sunos Version5.8
   Sun ≫ Sunos Version5.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.32%	0.861

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/24624

Patch

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1178

https://nvd.nist.gov/vuln/detail/CVE-2007-1794

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1794

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1794

EUVD