CVE-2007-5414

LOW 2.6CVE-2007-5414 · Published 12/10/2007 · updated 16/06/2026

In short

CVE-2007-5414 is a LOW (CVSS 2.6) vulnerability affecting firefox (mozilla).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 59.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
firefox mozilla	`≤ 1.8`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0, when UTF-7 document content is rendered directly in UTF-7, allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses single quote characters to delimit a literal string within an XSS sequence, a related issue to CVE-2007-5415.

References

osvdb.org/43670
securityreason.com/securityalert/3216
securityfocus.com/archive/1/482006/100/0/threaded

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free