CVE-2007-3737

Upstream information

CVE-2007-3737 at MITRE

Description

Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."

---

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having critical severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

SUSE Bugzilla entry: 288115 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SA:2007:049, published Thu, 02 Aug 2007 16:00:00 +0000
• openSUSE-SU-2014:1100-1, published Tue, 9 Sep 2014 18:04:16 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Server 11 SP1	MozillaFirefox >= 3.5.9-0.1.1 MozillaFirefox-translations >= 3.5.9-0.1.1
SUSE Linux Enterprise Server 11 SP2	MozillaFirefox >= 10.0-0.3.2 MozillaFirefox-translations >= 10.0-0.3.2
SUSE Linux Enterprise Server 11 SP3	MozillaFirefox >= 17.0.4esr-0.10.42 MozillaFirefox-translations >= 17.0.4esr-0.10.42
SUSE Linux Enterprise Server 11 SP4	MozillaFirefox >= 31.7.0esr-0.8.1 MozillaFirefox-translations >= 31.7.0esr-0.8.1
SUSE Linux Enterprise Software Development Kit 11 SP4	MozillaFirefox-devel >= 31.7.0esr-0.8.1