VULNERABILITY INTELLIGENCE

CVE-2007-5338

CVSS score9.3 HIGH
EPSS probability3.15%
CISA KEVNot currently listed
Published2007-10-21
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

Primary references