PT-2007-2520 · Mozilla+1 · Firefox+2
Publicado
2007-02-23
·
Atualizado
2018-10-16
·
CVE-2007-1092
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 1.5.0.9 and 2.0.0.1
SeaMonkey versions prior to 1.0.8
Description
The issue allows remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document. This triggers memory corruption due to the lack of a finalize hook on DOM window objects.
Recommendations
For Mozilla Firefox versions 1.5.0.9 and 2.0.0.1, update to a version that includes the fix for the memory corruption issue.
For SeaMonkey versions prior to 1.0.8, update to version 1.0.8 or later to resolve the issue.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Red Hat
Seamonkey