CVE-2007-1794

CRITICAL 10.0CVE-2007-1794 · Published 02/04/2007 · updated 16/06/2026

In short

CVE-2007-1794 is a CRITICAL (CVSS 10.0) vulnerability affecting mozilla (mozilla).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mozilla mozilla	`≤ 1.7`	No fix yet

Description

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805.

References

secunia.com/advisories/24624 · Patch
sunsolve.sun.com/search/document.do · Patch
vupen.com/english/advisories/2007/1178

More vulnerabilities in mozilla

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free