CVE-2007-5337

CVE-2007-5337 describes a vulnerability in Mozilla Firefox and SeaMonkey versions prior to 2.0.0.8 and 1.1.5 respectively, specifically when running on Linux systems with gnome-vfs support. This flaw could allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication. The attack involves a malicious webpage containing smb: or sftp: URIs designed to access other files on the server. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and resulting in partial confidentiality impact without affecting integrity or availability. Its EPSS score is low, suggesting a low probability of exploitation. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of older vulnerabilities.