4.3

CVE-2007-3089

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 2.0.0.4
Mozilla ≫ Firefox Version0.8
Mozilla ≫ Firefox Version0.9
Mozilla ≫ Firefox Version0.9.1
Mozilla ≫ Firefox Version0.9.2
Mozilla ≫ Firefox Version0.9.3
Mozilla ≫ Firefox Version0.10
Mozilla ≫ Firefox Version0.10.1
Mozilla ≫ Firefox Version1.0
Mozilla ≫ Firefox Version1.0.1
Mozilla ≫ Firefox Version1.0.2
Mozilla ≫ Firefox Version1.0.3
Mozilla ≫ Firefox Version1.0.4
Mozilla ≫ Firefox Version1.0.5
Mozilla ≫ Firefox Version1.0.6
Mozilla ≫ Firefox Version1.0.7
Mozilla ≫ Firefox Version1.0.8
Mozilla ≫ Firefox Version1.5
Mozilla ≫ Firefox Version1.5.0.1
Mozilla ≫ Firefox Version1.5.0.2
Mozilla ≫ Firefox Version1.5.0.3
Mozilla ≫ Firefox Version1.5.0.4
Mozilla ≫ Firefox Version1.5.0.5
Mozilla ≫ Firefox Version1.5.0.6
Mozilla ≫ Firefox Version1.5.0.7
Mozilla ≫ Firefox Version1.5.0.8
Mozilla ≫ Firefox Version1.5.0.9
Mozilla ≫ Firefox Version1.5.0.10
Mozilla ≫ Firefox Version1.5.0.11
Mozilla ≫ Firefox Version1.5.1
Mozilla ≫ Firefox Version1.5.2
Mozilla ≫ Firefox Version1.5.3
Mozilla ≫ Firefox Version1.5.4
Mozilla ≫ Firefox Version1.5.5
Mozilla ≫ Firefox Version1.5.6
Mozilla ≫ Firefox Version1.5.7
Mozilla ≫ Firefox Version1.5.8
Mozilla ≫ Firefox Version2.0
Mozilla ≫ Firefox Version2.0.0.1
Mozilla ≫ Firefox Version2.0.0.2
Mozilla ≫ Firefox Version2.0.0.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.77% 0.845
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt
ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc
http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html
http://lcamtuf.coredump.cx/ifsnatch/
http://osvdb.org/38024
http://secunia.com/advisories/25589
Vendor Advisory
http://secunia.com/advisories/26072
Vendor Advisory
http://secunia.com/advisories/26095
Vendor Advisory
http://secunia.com/advisories/26103
Vendor Advisory
http://secunia.com/advisories/26106
Vendor Advisory
http://secunia.com/advisories/26107
Vendor Advisory
http://secunia.com/advisories/26149
Vendor Advisory
http://secunia.com/advisories/26151
Vendor Advisory
http://secunia.com/advisories/26159
Vendor Advisory
http://secunia.com/advisories/26179
Vendor Advisory
http://secunia.com/advisories/26204
Vendor Advisory
http://secunia.com/advisories/26205
Vendor Advisory
http://secunia.com/advisories/26211
Vendor Advisory
http://secunia.com/advisories/26216
Vendor Advisory
http://secunia.com/advisories/26258
Vendor Advisory
http://secunia.com/advisories/26271
Vendor Advisory
http://secunia.com/advisories/26460
Vendor Advisory
http://secunia.com/advisories/28135
Vendor Advisory
http://securityreason.com/securityalert/2781
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1
http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html
http://www.debian.org/security/2007/dsa-1337
http://www.debian.org/security/2007/dsa-1338
http://www.debian.org/security/2007/dsa-1339
http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml
http://www.kb.cert.org/vuls/id/143297
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:152
http://www.mozilla.org/security/announce/2007/mfsa2007-20.html
http://www.novell.com/linux/security/advisories/2007_49_mozilla.html
http://www.redhat.com/support/errata/RHSA-2007-0722.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0723.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0724.html
Vendor Advisory
http://www.securityfocus.com/archive/1/470446/100/0/threaded
http://www.securityfocus.com/archive/1/474226/100/0/threaded
http://www.securityfocus.com/archive/1/474542/100/0/threaded
http://www.securityfocus.com/bid/24286
http://www.securitytracker.com/id?1018412
http://www.ubuntu.com/usn/usn-490-1
http://www.us-cert.gov/cas/techalerts/TA07-199A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/2564
http://www.vupen.com/english/advisories/2007/4256
https://bugzilla.mozilla.org/show_bug.cgi?id=381300
https://bugzilla.mozilla.org/show_bug.cgi?id=382686
https://exchange.xforce.ibmcloud.com/vulnerabilities/34701
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11122