Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-0994
HistoryMar 06, 2007 - 12:19 a.m.

CVE-2007-0994

2007-03-0600:19:00
CWE-94
[email protected]
web.nvd.nist.gov
3

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.03

Percentile

91.1%

JSON

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.

Affected configurations

Nvd
Node
mozillafirefoxRange1.5–1.5.0.10
OR
mozillafirefoxRange2.0–2.0.0.2
OR
mozillaseamonkeyRange1.0–1.0.8
OR
mozillaseamonkeyRange1.1–1.1.1
Node
debiandebian_linuxMatch3.1
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
debiandebian_linux3.1cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

References

Related

ubuntucve 1
cve 1
mozilla 1
cvelist 1
prion 1
securityvulns 2
osv 1
openvas 4
nessus 16
debian 1
redhat 3
suse 2
centos 4
oraclelinux 2
ubuntucve
ubuntucve
CVE-2007-0994
2007-03-06 00:00:00
cve
cve
CVE-2007-0994
2007-03-06 00:19:00
mozilla
mozilla
Privilege escalation by setting img.src to javascript: URI — Mozilla
2007-03-05 00:00:00
cvelist
cvelist
CVE-2007-0994
2007-03-06 00:00:00
prion
prion
Design/Logic Flaw
2007-03-06 00:19:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-09
2007-03-06 00:00:00
Multiple Mozilla Firefox / Thunderbird / Seamonkey vulnerabilities
2007-03-06 00:00:00
osv
osv
mozilla-firefox
2007-07-22 00:00:00
openvas
openvas
Debian Security Advisory DSA 1336-1 (mozilla-firefox)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1336-1)
2008-01-17 00:00:00
SuSE Update for mozilla,MozillaThunderbird,seamonkey SUSE-SA:2007:022
2009-01-28 00:00:00
nessus
nessus
Debian DSA-1336-1 : mozilla-firefox - several vulnerabilities
2007-07-27 00:00:00
Slackware 10.2 / 11.0 : mozilla-firefox (SSA:2007-066-03)
2007-03-12 00:00:00
CentOS 4 : firefox (CESA-2007:0079)
2007-02-26 00:00:00
debian
debian
[SECURITY] [DSA 1336-1] New mozilla-firefox packages fix several vulnerabilities
2007-07-22 17:43:28
redhat
redhat
(RHSA-2007:0097) Critical: firefox security update
2007-03-14 00:00:00
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
(RHSA-2007:0077) Critical: seamonkey security update
2007-02-23 00:00:00
suse
suse
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
centos
centos
seamonkey security update
2007-03-16 07:21:16
firefox security update
2007-02-24 13:53:25
devhelp, seamonkey security update
2007-02-24 14:49:37
oraclelinux
oraclelinux
Critical: Firefox security update
2007-02-24 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.03

Percentile

91.1%

JSON
Related for NVD:CVE-2007-0994
ubuntucve1cve1mozilla1cvelist1prion1securityvulns2osv1openvas4nessus16debian1redhat3suse2centos4oraclelinux2