vulnwire
6.8med

CVE-2007-0780

browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.6%
percentile 85%
Public exploits
0
none known

browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.

Exploit prediction (EPSS)

2.57% probability of exploitation in the next 30 days, higher than 85% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation

References

  • redhat.com /support/errata/RHSA-2007-0078.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • mozilla.org /security/announce/2007/mfsa2007-05.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/24395 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • bugzilla.mozilla.org /show_bug.cgi?id=354973 · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/461336/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/24328 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2007-0108.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • security.gentoo.org /glsa/glsa-200703-04.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • gentoo.org /security/en/glsa/glsa-200703-08.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9884 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • slackware.com /security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
  • secunia.com /advisories/24384 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24457 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24343 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?objectID=c00771742 · vendor-advisory, x_refsource_HP, x_transferred
  • vupen.com /english/advisories/2007/0718 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/24650 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • ubuntu.com /usn/usn-428-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • secunia.com /advisories/24320 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • issues.rpath.com /browse/RPL-1103 · x_refsource_CONFIRM, x_transferred
  • osvdb.org /32107 · vdb-entry, x_refsource_OSVDB, x_transferred
  • lists.suse.com /archive/suse-security-announce/2007-Mar/0001.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • securityfocus.com /archive/1/461809/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • novell.com /linux/security/advisories/2007_22_mozilla.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/24293 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24238 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24393 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24342 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24287 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/22694 · vdb-entry, x_refsource_BID, x_transferred
  • fedoranews.org /cms/node/2713 · vendor-advisory, x_refsource_FEDORA, x_transferred
  • redhat.com /support/errata/RHSA-2007-0097.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securitytracker.com /id?1017702 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • fedoranews.org /cms/node/2728 · vendor-advisory, x_refsource_FEDORA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/32667 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/24205 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • issues.rpath.com /browse/RPL-1081 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/24333 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:050 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/24290 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • rhn.redhat.com /errata/RHSA-2007-0077.html · Third Party Advisory
  • secunia.com /advisories/24437 · Third Party Advisory
  • secunia.com /advisories/24455 · Third Party Advisory
  • slackware.com /security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 · Mailing List, Third Party Advisory
  • redhat.com /support/errata/RHSA-2007-0079.html · Third Party Advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.