VULNERABILITY INTELLIGENCE

CVE-2007-2868

CVSS score9.3 HIGH
EPSS probability4.87%
CISA KEVNot currently listed
Published2007-06-01
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references