Unrated severityNVD Advisory· Published Oct 21, 2007· Updated Jun 16, 2026
CVE-2007-5337
CVE-2007-5337
Description
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:gnome:gnome-vfs:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=2.0.0.7
- (no CPE)range: <2.0.0.8
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*range: <=1.1.4
- (no CPE)range: <1.1.5
Patches
Vulnerability mechanics
References
47- www.mozilla.org/security/announce/2007/mfsa2007-34.htmlnvdPatch
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvd
- secunia.com/advisories/27276nvd
- secunia.com/advisories/27298nvd
- secunia.com/advisories/27325nvd
- secunia.com/advisories/27327nvd
- secunia.com/advisories/27335nvd
- secunia.com/advisories/27336nvd
- secunia.com/advisories/27356nvd
- secunia.com/advisories/27360nvd
- secunia.com/advisories/27383nvd
- secunia.com/advisories/27387nvd
- secunia.com/advisories/27403nvd
- secunia.com/advisories/27414nvd
- secunia.com/advisories/27425nvd
- secunia.com/advisories/27480nvd
- secunia.com/advisories/27665nvd
- secunia.com/advisories/27680nvd
- secunia.com/advisories/28398nvd
- securitytracker.com/idnvd
- sunsolve.sun.com/search/document.donvd
- support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.htmlnvd
- www.debian.org/security/2007/dsa-1392nvd
- www.debian.org/security/2007/dsa-1396nvd
- www.debian.org/security/2007/dsa-1401nvd
- www.gentoo.org/security/en/glsa/glsa-200711-14.xmlnvd
- www.mandriva.com/en/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2007_57_mozilla.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-0979.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-0980.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-0981.htmlnvd
- www.securityfocus.com/archive/1/482876/100/200/threadednvd
- www.securityfocus.com/archive/1/482925/100/0/threadednvd
- www.securityfocus.com/archive/1/482932/100/200/threadednvd
- www.securityfocus.com/bid/26132nvd
- www.ubuntu.com/usn/usn-536-1nvd
- www.vupen.com/english/advisories/2007/3544nvd
- www.vupen.com/english/advisories/2007/3587nvd
- www.vupen.com/english/advisories/2008/0083nvd
- bugzilla.mozilla.org/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/37287nvd
- issues.rpath.com/browse/RPL-1858nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11443nvd
- usn.ubuntu.com/535-1/nvd
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.htmlnvd
News mentions
0No linked articles in our index yet.