← Database

CVE-2007-5338

CRITICAL CVSS: 9.3 Published: 2007-10-21 Modified: 2026-06-16

Description

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

Affected Platforms

Mozilla FirefoxMozilla Seamonkey

Weakness Type

CWE-16, CWE-264

References