CVE catalog
CVE-2007-0994
mozilla-firefox
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 3.31% · Oct 25, 2026
A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges. security flaw
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | mozilla-firefox | 3.1 | 1.0.4-2 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge1 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge10 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge11 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge12 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge13 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge14 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge15 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge2 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge3 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge4 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge5 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge6 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge7 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge9 | vulnerable |
| Debian | mozilla-firefox | 3.1 | 1.0.4-2sarge17 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | mozilla-firefox | deb | 3.1 | 1.0.4-2sarge17 | Not reported | DSA-1336-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: