VULNERABILITY INTELLIGENCE
CVE-2007-0801
CVSS score4.3 MEDIUM
EPSS probability1.85%
CISA KEVNot currently listed
Published2007-02-07
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest.