← Retour aux CVEs

CVE-2007-0994

N/A

Description

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.

Details CVE

Score CVSS v3.1N/A

Publie3/6/2007

Derniere modification4/23/2026

Sourcenvd

Observations honeypot0

Produits affectes

debian:debian_linuxmozilla:firefoxmozilla:seamonkey

Faiblesses (CWE)

CWE-94

References

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc(secalert@redhat.com)

ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc(secalert@redhat.com)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733(secalert@redhat.com)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742(secalert@redhat.com)

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html(secalert@redhat.com)

http://secunia.com/advisories/24384(secalert@redhat.com)

http://secunia.com/advisories/24395(secalert@redhat.com)

http://secunia.com/advisories/24455(secalert@redhat.com)

http://secunia.com/advisories/24457(secalert@redhat.com)

http://secunia.com/advisories/24650(secalert@redhat.com)

http://secunia.com/advisories/25588(secalert@redhat.com)

http://securitytracker.com/id?1017726(secalert@redhat.com)

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131(secalert@redhat.com)

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851(secalert@redhat.com)

http://www.debian.org/security/2007/dsa-1336(secalert@redhat.com)

http://www.mozilla.org/security/announce/2007/mfsa2007-09.html(secalert@redhat.com)

http://www.novell.com/linux/security/advisories/2007_22_mozilla.html(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2007-0078.html(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2007-0097.html(secalert@redhat.com)

http://www.securityfocus.com/bid/22826(secalert@redhat.com)

http://www.vupen.com/english/advisories/2007/0823(secalert@redhat.com)

https://issues.rpath.com/browse/RPL-1103(secalert@redhat.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749(secalert@redhat.com)

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc(af854a3a-2127-422b-91ae-364da2661108)

ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc(af854a3a-2127-422b-91ae-364da2661108)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733(af854a3a-2127-422b-91ae-364da2661108)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742(af854a3a-2127-422b-91ae-364da2661108)

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/24384(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/24395(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/24455(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/24457(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/24650(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/25588(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1017726(af854a3a-2127-422b-91ae-364da2661108)

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131(af854a3a-2127-422b-91ae-364da2661108)

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2007/dsa-1336(af854a3a-2127-422b-91ae-364da2661108)

http://www.mozilla.org/security/announce/2007/mfsa2007-09.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.novell.com/linux/security/advisories/2007_22_mozilla.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2007-0078.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2007-0097.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/22826(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2007/0823(af854a3a-2127-422b-91ae-364da2661108)

https://issues.rpath.com/browse/RPL-1103(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.