CVE-2007-5338: mozilla firefox Configuration

CVSS: 9.3v2.0HighModified

Published 21-10-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-5338 is a high (CVSS 9.3) Configuration vulnerability in mozilla firefox. EPSS estimates a 3.15% chance of exploitation in the next 30 days, higher than 87.8% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

3.15%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 9

DSA-1392-1 DSA-1396-1 DSA-1401-1 DSA-1534-2 DTSA-69-1 DTSA-80-1+3 more

Timeline

21-10-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

3.15%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.15% on 21-09-2026

21-09-202621-10-2026

EPSS score

3.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Mozilla2 products

firefox≤ 2.0.0.7
seamonkey≤ 1.1.4

1 vendor · 2 products

References

48 links

www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/archive/1/482876/100/200/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2007/3587VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/27414Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/482925/100/0/threadedMailing ListX Refsource BUGTRAQ
issues.rpath.com/browse/RPL-1858X Refsource CONFIRM
www.gentoo.org/security/en/glsa/glsa-200711-14.xmlVendor AdvisoryX Refsource GENTOO
www.mozilla.org/security/announce/2007/mfsa2007-35.htmlX Refsource CONFIRMPatch
secunia.com/advisories/27360Third Party AdvisoryX Refsource SECUNIAVendor Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742Vendor AdvisoryX Refsource HP

Show all 48 references

secunia.com/advisories/27298Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27315Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27327Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/3544VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/27276Third Party AdvisoryX Refsource SECUNIAVendor Advisory
usn.ubuntu.com/535-1/Vendor AdvisoryX Refsource UBUNTU
www.debian.org/security/2007/dsa-1401Vendor AdvisoryX Refsource DEBIAN
www.debian.org/security/2007/dsa-1392Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2007-0980.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/27383Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2007_57_mozilla.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/27356Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2007-0981.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/27387Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27403Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27336Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2007/dsa-1396Vendor AdvisoryX Refsource DEBIAN
securitytracker.com/id?1018836VDB EntryX Refsource SECTRACK
secunia.com/advisories/27425Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28398Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/37288VDB EntryX Refsource XF
secunia.com/advisories/27311Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27325Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/en/security/advisories?name=MDKSA-2007:202Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/27665Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2007-0979.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/27335Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27480Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27680Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/26132VDB EntryX Refsource BID
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10965VDB EntrySignatureX Refsource OVAL
support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.htmlX Refsource CONFIRM
sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1Vendor AdvisoryX Refsource SUNALERT
www.securityfocus.com/archive/1/482932/100/200/threadedMailing ListX Refsource BUGTRAQ
www.ubuntu.com/usn/usn-536-1Vendor AdvisoryX Refsource UBUNTU

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities