CVEvulnerability
CVE-2007-0780
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-02-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-79
Description
browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.
Affected configurations
• mozilla firefox (>= 1.5 < 1.5.0.10)
• mozilla firefox (>= 2.0 < 2.0.0.2)
• mozilla seamonkey (< 1.0.8)
• canonical ubuntu linux 5.10
• canonical ubuntu linux 6.06
• canonical ubuntu linux 6.10
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc Broken Link
- ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc Broken Link
- http://fedoranews.org/cms/node/2713 Broken Link
- http://fedoranews.org/cms/node/2728 Broken Link
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2007-0077.html Third Party Advisory
- http://secunia.com/advisories/24205 Third Party Advisory
- http://secunia.com/advisories/24238 Third Party Advisory
- http://secunia.com/advisories/24287 Third Party Advisory
- http://secunia.com/advisories/24290 Third Party Advisory
- http://secunia.com/advisories/24293 Third Party Advisory
- http://secunia.com/advisories/24320 Third Party Advisory
- http://secunia.com/advisories/24328 Third Party Advisory
- http://secunia.com/advisories/24333 Third Party Advisory
- http://secunia.com/advisories/24342 Third Party Advisory
- http://secunia.com/advisories/24343 Third Party Advisory
- http://secunia.com/advisories/24384 Third Party Advisory
- http://secunia.com/advisories/24393 Third Party Advisory
- http://secunia.com/advisories/24395 Third Party Advisory
- http://secunia.com/advisories/24437 Third Party Advisory
- http://secunia.com/advisories/24455 Third Party Advisory
- http://secunia.com/advisories/24457 Third Party Advisory
- http://secunia.com/advisories/24650 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200703-04.xml Third Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 Mailing List, Third Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 Mailing List, Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 Third Party Advisory
- http://www.mozilla.org/security/announce/2007/mfsa2007-05.html Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2007_22_mozilla.html Broken Link
- http://www.osvdb.org/32107 Broken Link
- http://www.redhat.com/support/errata/RHSA-2007-0078.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0079.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0097.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0108.html Third Party Advisory
- http://www.securityfocus.com/archive/1/461336/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/461809/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/22694 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1017702 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-428-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2007/0718 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=354973 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32667 Third Party Advisory, VDB Entry
- https://issues.rpath.com/browse/RPL-1081 Broken Link
- https://issues.rpath.com/browse/RPL-1103 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9884 Third Party Advisory
- ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc Broken Link
- ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc Broken Link
- http://fedoranews.org/cms/node/2713 Broken Link
- http://fedoranews.org/cms/node/2728 Broken Link
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 Broken Link
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2007-0077.html Third Party Advisory
- http://secunia.com/advisories/24205 Third Party Advisory
- http://secunia.com/advisories/24238 Third Party Advisory
- http://secunia.com/advisories/24287 Third Party Advisory
- http://secunia.com/advisories/24290 Third Party Advisory
- http://secunia.com/advisories/24293 Third Party Advisory
- http://secunia.com/advisories/24320 Third Party Advisory
- http://secunia.com/advisories/24328 Third Party Advisory
- http://secunia.com/advisories/24333 Third Party Advisory
- http://secunia.com/advisories/24342 Third Party Advisory
- http://secunia.com/advisories/24343 Third Party Advisory
- http://secunia.com/advisories/24384 Third Party Advisory
- http://secunia.com/advisories/24393 Third Party Advisory
- http://secunia.com/advisories/24395 Third Party Advisory
- http://secunia.com/advisories/24437 Third Party Advisory
- http://secunia.com/advisories/24455 Third Party Advisory
- http://secunia.com/advisories/24457 Third Party Advisory
- http://secunia.com/advisories/24650 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200703-04.xml Third Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 Mailing List, Third Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 Mailing List, Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 Third Party Advisory
- http://www.mozilla.org/security/announce/2007/mfsa2007-05.html Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2007_22_mozilla.html Broken Link
- http://www.osvdb.org/32107 Broken Link
- http://www.redhat.com/support/errata/RHSA-2007-0078.html Third Party Advisory