CVE-2007-5337
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with...
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.
Exploit likelihood
What each source reports
NVD Score used
4.3
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.
- Record
CVE-2007-5337- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.
- Record
CVE-2007-5337- Updated
- 2026-11-02
EUVDEUVD-2007-5316 No score
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.
- Record
EUVD-2007-5316- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gq79-35xw-52pq No score
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with...
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.
- Record
GHSA-gq79-35xw-52pq- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 From an advisory covering 9 CVEs |
before 1.8.0.14~pre071019b-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 4 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny1 |
1.8.0.14~pre071019b-0etch1 |
iceweaselDebian:4.0 From an advisory covering 9 CVEs |
before 2.0.0.6+2.0.0.8-0etch1, plus listed versions 2.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch1 Show 6 moreShow less2.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-1 |
2.0.0.6+2.0.0.8-0etch1 |
iceapeDebian:4.0 From an advisory covering 9 CVEs |
before 1.0.11~pre071022-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.8-41.0.9-0etch1 |
1.0.11~pre071022-0etch1 |
xulrunnerDebian:5.0 From an advisory covering 9 CVEs |
before 1.8.0.14~pre071019b-0lenny1 | 1.8.0.14~pre071019b-0lenny1 |
iceapeDebian:5.0 From an advisory covering 9 CVEs |
before 1.0.11~pre071022-0etch1+lenny1 | 1.0.11~pre071022-0etch1+lenny1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
Show 129 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-5.el5 | 0:1.5.0.12-5.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-5.el5 | 0:1.5.0.12-5.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, published, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5337 is a medium vulnerability (CVSS 4.3) in Gnome Gnome-vfs, published October 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.44%, the 84th percentile. No source names a fixed version.
References
redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
securityfocus.com/archive/1/482876/100/200/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/37287
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11443
vupen.com/english/advisories/2007/3587
secunia.com/advisories/27414
Show 89 moreShow less
securityfocus.com/archive/1/482925/100/0/threaded
issues.rpath.com/browse/RPL-1858
gentoo.org/security/en/glsa/glsa-200711-14.xml
secunia.com/advisories/27360
mozilla.org/security/announce/2007/mfsa2007-34.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
secunia.com/advisories/27298
securitytracker.com/id?1018837
secunia.com/advisories/27327
vupen.com/english/advisories/2007/3544
secunia.com/advisories/27276
usn.ubuntu.com/535-1
debian.org/security/2007/dsa-1401
debian.org/security/2007/dsa-1392
redhat.com/support/errata/RHSA-2007-0980.html
secunia.com/advisories/27383
novell.com/linux/security/advisories/2007_57_mozilla.html
bugzilla.mozilla.org/show_bug.cgi?id=381146
secunia.com/advisories/27356
redhat.com/support/errata/RHSA-2007-0981.html
vupen.com/english/advisories/2008/0083
secunia.com/advisories/27387
redhat.com/archives/fedora-package-announce/2007-November/msg00498.html
secunia.com/advisories/27403
secunia.com/advisories/27336
debian.org/security/2007/dsa-1396
secunia.com/advisories/27425
secunia.com/advisories/28398
secunia.com/advisories/27325
mandriva.com/en/security/advisories?name=MDKSA-2007:202
secunia.com/advisories/27665
redhat.com/support/errata/RHSA-2007-0979.html
secunia.com/advisories/27335
redhat.com/archives/fedora-package-announce/2007-October/msg00355.html
secunia.com/advisories/27480
secunia.com/advisories/27680
securityfocus.com/bid/26132
support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
securityfocus.com/archive/1/482932/100/200/threaded
ubuntu.com/usn/usn-536-1
nvd.nist.gov/vuln/detail/CVE-2007-5337
github.com/advisories/GHSA-gq79-35xw-52pq
access.redhat.com/errata/RHSA-2007:0979
en.wikipedia.org/wiki/HTTP_response_splitting
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=246248
bugzilla.redhat.com/show_bug.cgi?id=333991
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0979.json
access.redhat.com/security/cve/CVE-2007-1095
bugzilla.redhat.com/show_bug.cgi?id=1618294
cve.org/CVERecord?id=CVE-2007-1095
nvd.nist.gov/vuln/detail/CVE-2007-1095
access.redhat.com/security/cve/CVE-2007-2292
bugzilla.redhat.com/show_bug.cgi?id=1618308
cve.org/CVERecord?id=CVE-2007-2292
nvd.nist.gov/vuln/detail/CVE-2007-2292
access.redhat.com/security/cve/CVE-2007-3511
bugzilla.redhat.com/show_bug.cgi?id=1618316
cve.org/CVERecord?id=CVE-2007-3511
nvd.nist.gov/vuln/detail/CVE-2007-3511
access.redhat.com/security/cve/CVE-2007-3844
bugzilla.redhat.com/show_bug.cgi?id=250648
cve.org/CVERecord?id=CVE-2007-3844
nvd.nist.gov/vuln/detail/CVE-2007-3844
access.redhat.com/security/cve/CVE-2007-5334
bugzilla.redhat.com/show_bug.cgi?id=1618324
cve.org/CVERecord?id=CVE-2007-5334
nvd.nist.gov/vuln/detail/CVE-2007-5334
access.redhat.com/security/cve/CVE-2007-5337
bugzilla.redhat.com/show_bug.cgi?id=1618325
cve.org/CVERecord?id=CVE-2007-5337
access.redhat.com/security/cve/CVE-2007-5338
bugzilla.redhat.com/show_bug.cgi?id=1618326
cve.org/CVERecord?id=CVE-2007-5338
nvd.nist.gov/vuln/detail/CVE-2007-5338
access.redhat.com/security/cve/CVE-2007-5339
bugzilla.redhat.com/show_bug.cgi?id=1618328
cve.org/CVERecord?id=CVE-2007-5339
nvd.nist.gov/vuln/detail/CVE-2007-5339
access.redhat.com/security/cve/CVE-2007-5340
bugzilla.redhat.com/show_bug.cgi?id=1618329
cve.org/CVERecord?id=CVE-2007-5340
nvd.nist.gov/vuln/detail/CVE-2007-5340
access.redhat.com/errata/RHSA-2007:0980
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0980.json
access.redhat.com/errata/RHSA-2007:0981
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0981.json