Lucene search
MitreCVE-2007-1256HistoryMar 03, 2007 - 8:19 p.m.
CVE-2007-1256
2007-03-0320:19:00
CWE-119
mitre
web.nvd.nist.gov
32
cve-2007-1256
mozilla firefox
address bar spoofing
favicon spoofing
document source spoofing
arbitrary websites
onunload attribute
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.2
Confidence
Low
EPSS
0.967
Percentile
99.7%
Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092.
Affected configurations
Node
mozillafirefoxMatch2.0
ORmozillafirefoxMatch2.0.0.1
ORmozillafirefoxMatch2.0.0.2
Related
prion
prion
Design/Logic Flaw
2007-03-03 20:19:00
Memory corruption
2007-02-26 17:28:00
ubuntucve
ubuntucve
CVE-2007-1256
2007-03-03 00:00:00
CVE-2007-1092
2007-02-26 00:00:00
cvelist
cvelist
CVE-2007-1256
2007-03-03 20:00:00
CVE-2007-1092
2007-02-26 17:00:00
nvd
nvd
CVE-2007-1256
2007-03-03 20:19:00
CVE-2007-1092
2007-02-26 17:28:00
securityvulns
securityvulns
Multiple browsers OnUnload event handler different vulnerabilities
2007-02-28 00:00:00
Mozilla Foundation Security Advisory 2007-08
2007-02-27 00:00:00
mozilla
mozilla
onUnload + document.write() memory corruption — Mozilla
2007-02-25 00:00:00
cert
cert
Mozilla Firefox fails to properly handle JavaScript onUnload events
2007-02-23 00:00:00
cve
cve
CVE-2007-1092
2007-02-26 17:28:00
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:050-1 (mozilla-firefox)
2009-04-09 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (12bd6ecf-c430-11db-95c5-000c6ec775d9)
2007-02-26 00:00:00
RHEL 4 : Firefox (RHSA-2007:0079)
2007-02-26 00:00:00
Oracle Linux 4 : Firefox (ELSA-2007-0079)
2013-07-12 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
redhat
redhat
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
(RHSA-2007:0078) Critical: thunderbird security update
2007-03-02 00:00:00
(RHSA-2007:0077) Critical: seamonkey security update
2007-02-23 00:00:00
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: Firefox security update
2007-02-24 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
ubuntu
ubuntu
Firefox regression
2007-03-02 00:00:00
Firefox vulnerabilities
2007-03-01 00:00:00
centos
centos
firefox security update
2007-02-24 13:53:25
thunderbird security update
2007-03-04 11:06:21
devhelp, seamonkey security update
2007-02-24 14:49:37
suse
suse
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.2
Confidence
Low
EPSS
0.967
Percentile
99.7%
Related for CVE-2007-1256