CVE-2007-1092

CVE-2007-1092

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 7.1%
exploitation probability
7.1%top 6% of all CVEs
observed exploitation
nono source reports it
Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.
Affected products
n/a · n/a
References
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.ascftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.aschttp://archives.neohapsis.com/archives/fulldisclosure/2007-02/0525.htmlhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.htmlhttp://osvdb.org/32103https://bugzilla.mozilla.org/show_bug.cgi?id=371321http://secunia.com/advisories/24333http://secunia.com/advisories/24343http://secunia.com/advisories/24384http://secunia.com/advisories/24395http://secunia.com/advisories/24457