CVE-2007-5340: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 3.4% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption.

Affected products

• Mozilla Firefox: up to and including 2.0.0.7
• Mozilla Seamonkey: up to and including 1.1.4
• Mozilla Thunderbird: up to and including 2.0.0.6

Published 2007-10-21. Last modified 2026-06-16.