← Database

CVE-2007-1092

CRITICAL CVSS: 9.3 Published: 2007-02-26 Modified: 2026-06-16

Description

Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.

Affected Platforms

Mozilla FirefoxMozilla Seamonkey

Weakness Type

NVD-CWE-Other

References