CVE-2007-0994 PUBLISHED CVSS 6.800000190734863 MEDIUM

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.

EPSS 2.60% · 85.5th percentile

Risk Scores

CVSS v2.0
6.800000190734863
EPSS Score
2.60%
85.5th percentile

Affected Products

VendorProductVersions
debiandebian_linux3.1
mozillafirefox1.5, 2.0
n/an/an/a
mozillaseamonkey1.0, 1.1

Timeline

References

…and 4 more

Open in Interactive Console →