CVE-2007-1092 PUBLISHED CVSS 9.300000190734863 CRITICAL

Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.

EPSS 21.38% · 95.6th percentile

Risk Scores

CVSS v2.0
9.300000190734863
EPSS Score
21.38%
95.6th percentile

Affected Products

VendorProductVersions
mozillafirefox1.5.0.9, 2.0.0.1
mozillaseamonkey0
n/an/an/a

Timeline

References

…and 9 more

Open in Interactive Console →