CVE-2007-1092
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 7.1%
probabilidade de exploração
7.1%top 6% das CVEs
exploração observada
nãonenhuma fonte reporta
Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.
Produtos afetados
n/a · n/aReferências
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.ascftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.aschttp://archives.neohapsis.com/archives/fulldisclosure/2007-02/0525.htmlhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.htmlhttp://osvdb.org/32103https://bugzilla.mozilla.org/show_bug.cgi?id=371321http://secunia.com/advisories/24333http://secunia.com/advisories/24343http://secunia.com/advisories/24384http://secunia.com/advisories/24395http://secunia.com/advisories/24457