CVE-2007-0801: Medium severity Mozilla Firefox vulnerability
Published Feb 7, 2007
·Updated
The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest.
Affected Software
1 affected component
Mozilla Firefox=1.5.0.9
Event History
Feb 7, 2007
CVE Published
11:28 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0801?
CVE-2007-0801 is classified as a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2007-0801?
To fix CVE-2007-0801, update Mozilla Firefox to a version later than 1.5.0.9, as it addresses the vulnerability.
3
What versions of Firefox are affected by CVE-2007-0801?
CVE-2007-0801 specifically affects Mozilla Firefox version 1.5.0.9.
4
Can CVE-2007-0801 be exploited remotely?
Yes, CVE-2007-0801 can be exploited remotely via crafted XMLHttpRequests by attackers.
5
What are the implications of CVE-2007-0801 for users?
Users affected by CVE-2007-0801 are at risk of executing arbitrary web scripts or HTML, compromising their security.