Lucene search
Mozilla FoundationMFSA2007-08HistoryFeb 25, 2007 - 12:00 a.m.
onUnload + document.write() memory corruption — Mozilla
2007-02-2500:00:00
Mozilla Foundation
www.mozilla.org
24
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.967
Percentile
99.7%
Michal Zalewski reported a memory corruption vulnerability in Firefox 2.0.0.1 involving mixing the onUnload event handler and self-modifying document.write() calls. This flaw was introduced in Firefox 2.0.0.1 and 1.5.0.9 and does not affect earlier versions; it is fixed in Firefox 2.0.0.2 and 1.5.0.10
Affected configurations
Node
mozillafirefoxRange<1.5.0.10
ORmozillafirefoxRange<2.0.0.2
ORmozillaseamonkeyRange<1.0.8
Related
nvd
nvd
CVE-2007-1092
2007-02-26 17:28:00
CVE-2007-1256
2007-03-03 20:19:00
cvelist
cvelist
CVE-2007-1092
2007-02-26 17:00:00
CVE-2007-1256
2007-03-03 20:00:00
prion
prion
Memory corruption
2007-02-26 17:28:00
Design/Logic Flaw
2007-03-03 20:19:00
cert
cert
Mozilla Firefox fails to properly handle JavaScript onUnload events
2007-02-23 00:00:00
cve
cve
CVE-2007-1092
2007-02-26 17:28:00
CVE-2007-1256
2007-03-03 20:19:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-08
2007-02-27 00:00:00
Multiple browsers OnUnload event handler different vulnerabilities
2007-02-28 00:00:00
ubuntucve
ubuntucve
CVE-2007-1092
2007-02-26 00:00:00
CVE-2007-1256
2007-03-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:050-1 (mozilla-firefox)
2009-04-09 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:050 (mozilla-firefox)
2009-04-09 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (12bd6ecf-c430-11db-95c5-000c6ec775d9)
2007-02-26 00:00:00
RHEL 4 : Firefox (RHSA-2007:0079)
2007-02-26 00:00:00
Oracle Linux 4 : Firefox (ELSA-2007-0079)
2013-07-12 00:00:00
redhat
redhat
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
(RHSA-2007:0078) Critical: thunderbird security update
2007-03-02 00:00:00
(RHSA-2007:0077) Critical: seamonkey security update
2007-02-23 00:00:00
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: Firefox security update
2007-02-24 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
ubuntu
ubuntu
Firefox regression
2007-03-02 00:00:00
Firefox vulnerabilities
2007-03-01 00:00:00
centos
centos
thunderbird security update
2007-03-04 11:06:21
firefox security update
2007-02-24 13:53:25
seamonkey security update
2007-03-16 07:21:16
suse
suse
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.967
Percentile
99.7%
Related for MFSA2007-08