CVE-2007-5338

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.

Date published : 2007-10-21

http://www.securityfocus.com/bid/26132

http://www.securityfocus.com/archive/1/482876/100/200/threaded