CVE-2007-1794

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-02 · updated 2026-06-16

Description

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805.

Affected products

Mozilla: through 1.7

References

http://secunia.com/advisories/24624
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1
http://www.vupen.com/english/advisories/2007/1178
http://secunia.com/advisories/24624
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1
http://www.vupen.com/english/advisories/2007/1178

Get alerted when CVE-2007-1794 or the next vulnerability affects your stack