Unrated severityNVD Advisory· Published Oct 21, 2007· Updated Jun 16, 2026
CVE-2007-5338
CVE-2007-5338
Description
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=2.0.0.7
- (no CPE)range: <2.0.0.8
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*range: <=1.1.4
- (no CPE)range: <1.1.5
Patches
Vulnerability mechanics
References
48- www.mozilla.org/security/announce/2007/mfsa2007-35.htmlnvdPatch
- secunia.com/advisories/27276nvdVendor Advisory
- secunia.com/advisories/27298nvdVendor Advisory
- secunia.com/advisories/27311nvdVendor Advisory
- secunia.com/advisories/27315nvdVendor Advisory
- secunia.com/advisories/27325nvdVendor Advisory
- secunia.com/advisories/27327nvdVendor Advisory
- secunia.com/advisories/27335nvdVendor Advisory
- secunia.com/advisories/27336nvdVendor Advisory
- secunia.com/advisories/27356nvdVendor Advisory
- secunia.com/advisories/27360nvdVendor Advisory
- secunia.com/advisories/27383nvdVendor Advisory
- secunia.com/advisories/27387nvdVendor Advisory
- secunia.com/advisories/27403nvdVendor Advisory
- secunia.com/advisories/27414nvdVendor Advisory
- secunia.com/advisories/27425nvdVendor Advisory
- secunia.com/advisories/27480nvdVendor Advisory
- secunia.com/advisories/27665nvdVendor Advisory
- secunia.com/advisories/27680nvdVendor Advisory
- secunia.com/advisories/28398nvdVendor Advisory
- www.redhat.com/support/errata/RHSA-2007-0980.htmlnvdVendor Advisory
- www.redhat.com/support/errata/RHSA-2007-0981.htmlnvdVendor Advisory
- www.vupen.com/english/advisories/2007/3544nvdVendor Advisory
- www.vupen.com/english/advisories/2007/3587nvdVendor Advisory
- www.vupen.com/english/advisories/2008/0083nvdVendor Advisory
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvd
- securitytracker.com/idnvd
- sunsolve.sun.com/search/document.donvd
- support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.htmlnvd
- www.debian.org/security/2007/dsa-1392nvd
- www.debian.org/security/2007/dsa-1396nvd
- www.debian.org/security/2007/dsa-1401nvd
- www.gentoo.org/security/en/glsa/glsa-200711-14.xmlnvd
- www.mandriva.com/en/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2007_57_mozilla.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-0979.htmlnvd
- www.securityfocus.com/archive/1/482876/100/200/threadednvd
- www.securityfocus.com/archive/1/482925/100/0/threadednvd
- www.securityfocus.com/archive/1/482932/100/200/threadednvd
- www.securityfocus.com/bid/26132nvd
- www.ubuntu.com/usn/usn-536-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/37288nvd
- issues.rpath.com/browse/RPL-1858nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10965nvd
- usn.ubuntu.com/535-1/nvd
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.htmlnvd
News mentions
0No linked articles in our index yet.