CVE-2007-3737: Mozilla Firefox

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."

Affected products

• Mozilla Firefox: version 2.0 only; version 2.0.0.1 only; version 2.0.0.2 only; version 2.0.0.3 only; version 2.0.0.4 only

Published 2007-07-18. Last modified 2026-06-16.