--- title: "CVE-2007-0994\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2007-0994?format=md keywords: index, follow --- # CVE-2007-0994 Publication date 6 March 2007 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 7.04 feisty | Fixed 2.0.0.6+1-0ubuntu1 | | 6.10 edgy | Fixed 2.0.0.6+0dfsg-0ubuntu0.6.10 | | 6.06 LTS dapper | Fixed 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1 | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0994) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2007-0994) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2007-0994) * [Debian](https://security-tracker.debian.org/tracker/CVE-2007-0994) ### Other references *