← Database

CVE-2007-0801

MEDIUM CVSS: 4.3 Published: 2007-02-07 Modified: 2026-06-16

Description

The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest.

Affected Platforms

Mozilla Firefox

Weakness Type

NVD-CWE-Other

References