PT-2007-2520 · Mozilla+1 · Firefox+2
Published
2007-02-23
·
Updated
2018-10-16
·
CVE-2007-1092
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 1.5.0.9 and 2.0.0.1
SeaMonkey versions prior to 1.0.8
Description
The issue allows remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document. This triggers memory corruption due to the lack of a finalize hook on DOM window objects.
Recommendations
For Mozilla Firefox versions 1.5.0.9 and 2.0.0.1, update to a version that includes the fix for the memory corruption issue.
For SeaMonkey versions prior to 1.0.8, update to version 1.0.8 or later to resolve the issue.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Firefox
Red Hat
Seamonkey