Unrated severityNVD Advisory· Published Apr 2, 2007· Updated Jun 16, 2026

CVE-2007-1794

Description

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805.

Affected products

Mozilla Corporation/Mozilla
cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*
Range: <=1.7
Sun Corporation/Mozillallm-create
Range: <=1.7
Sun Corporation/Solarisllm-fuzzy
Range: 8, 9, 10

Patches

Vulnerability mechanics

References

secunia.com/advisories/24624nvdPatchVendor Advisory
sunsolve.sun.com/search/document.donvdPatchVendor Advisory
www.vupen.com/english/advisories/2007/1178nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000