Security Advisory

CVE-2007-0801

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-02-07 11:00:00
Last updated 2024-08-07 12:34:21
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest.