CVE-2007-1794

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/24624	Patch Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2007/1178
http://secunia.com/advisories/24624	Patch Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2007/1178

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:sun:solaris:10.0:hw2::::::
	cpe:2.3:o:sun:sunos:5.8:::::::*
	cpe:2.3:o:sun:sunos:5.9:::::::*

cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:29

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/24624 - Patch, Vendor Advisory~~	() http://secunia.com/advisories/24624 - Patch, Vendor Advisory
References	~~() http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1 - Patch, Vendor Advisory~~	() http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1 - Patch, Vendor Advisory
References	~~() http://www.vupen.com/english/advisories/2007/1178 -~~	() http://www.vupen.com/english/advisories/2007/1178 -

Information

Published : 2007-04-02 22:19

Updated : 2024-11-21 00:29

NVD link : CVE-2007-1794

Mitre link : CVE-2007-1794

CVE.ORG link : CVE-2007-1794

JSON object : View

Products Affected

sun

sunos
solaris

mozilla

mozilla

CWE

NVD-CWE-Other

{"id": "CVE-2007-1794", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-04-02T22:19:00.000", "references": [{"url": "http://secunia.com/advisories/24624", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/1178", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24624", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/1178", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805."}, {"lang": "es", "value": "El motor de Javascript en Mozilla 1.7 y anteriores en Sun Solaris 8, 9, y 10 podr\u00eda permitir a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores que afectan al colector de basura que provoca el borrado de un objeto temporal que todav\u00eda se est\u00e1 utilizando. NOTA: este asunto podr\u00eda estar relacionado con CVE-2006-3805."}], "lastModified": "2024-11-21T00:29:10.503", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sun:solaris:10.0:hw2:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DBEB91FE-FB39-4AB2-8172-2A47EC59861B"}, {"criteria": "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2475113-CFE4-41C8-A86F-F2DA6548D224"}, {"criteria": "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9239E8A-8155-462A-A409-D66FF6B94B04", "versionEndIncluding": "1.7"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}