CVE-2007-1947

Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.04 for Mozilla Firefox…

published April 11, 2007

CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.04 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the browser chrome by overwriting the toString function via a certain function declaration, related to incorrect identification of anonymous JavaScript functions, a different issue than CVE-2007-1878.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04483 · 91.4th percentile
Published
2007-04-11T01:00Z
EPSS history
Timeline
  • 11 APR 01:00Z
    Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.04 for Mozilla Firefox…
    cvelistv5