CVE-2007-1095

2007-02-2600:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.547

Percentile

97.7%

JSON

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly
implement JavaScript onUnload handlers, which allows remote attackers to
run certain JavaScript code and access the location DOM hierarchy in the
context of the next web site that is visited by a client.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1UNKNOWN
ubuntu6.10noarchfirefox< 2.0.0.6+0dfsg-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchfirefox< 2.0.0.6+1-0ubuntu1UNKNOWN
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13+1.5.0.14b-0ubuntu0.6.06UNKNOWN
ubuntu6.10noarchmozilla-thunderbird< 1.5.0.13+1.5.0.14b-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchmozilla-thunderbird< 1.5.0.13+1.5.0.14b-0ubuntu0.7.04UNKNOWN
ubuntu7.10noarchthunderbird< 2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1	UNKNOWN
ubuntu	6.10	noarch	firefox	< 2.0.0.6+0dfsg-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	firefox	< 2.0.0.6+1-0ubuntu1	UNKNOWN
ubuntu	6.06	noarch	mozilla-thunderbird	< 1.5.0.13+1.5.0.14b-0ubuntu0.6.06	UNKNOWN
ubuntu	6.10	noarch	mozilla-thunderbird	< 1.5.0.13+1.5.0.14b-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	mozilla-thunderbird	< 1.5.0.13+1.5.0.14b-0ubuntu0.7.04	UNKNOWN
ubuntu	7.10	noarch	thunderbird	< 2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10	UNKNOWN