CVE-2007-3657: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by opening multiple tabs in a popup window. NOTE: this issue has been disputed by third party researchers, stating that "this does not crash on me, and I can't see a likely mechanism of action that would lead to a DoS condition.

Affected products

• Mozilla Firefox: version 2.0.0.4 only

Published 2007-07-10. Last modified 2026-06-16.