Intrusion PreventionFirebug.Console.Log.Remote.Code.Execution
Description
A vulnerability has been identified in the Firebug extension for Firefox. A successful exploit may allow remote attackers to execute arbitrary code, with chrome privileges. The vulnerability can be exploited through the console.log() function, by convincing a user to visit a specially crafted web page.
Affected Products
Firebug versions prior to 1.04.
Impact
Remote code execution.
Recommended Actions
Update to version 1.04.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14454 |
| Created | Sep 24, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2007-1947 CVE-2007-1878 |
| Exploit Prediction Score | 7.32% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |