VULNERABILITY INTELLIGENCE

CVE-2007-1794

CVSS score10 HIGH
EPSS probability4.34%
CISA KEVNot currently listed
Published2007-04-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805.

Primary references