CVEvulnerability
CVE-2007-1095
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-02-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.
Affected configurations
• mozilla firefox (<= 2.0.0.7)
• mozilla firefox 0.1
• mozilla firefox 0.2
• mozilla firefox 0.3
• mozilla firefox 0.4
• mozilla firefox 0.5
• mozilla firefox 0.6
• mozilla firefox 0.6.1
• mozilla firefox 0.7
• mozilla firefox 0.7.1
• mozilla firefox 0.8
• mozilla firefox 0.9
• mozilla firefox 0.9.1
• mozilla firefox 0.9.2
• mozilla firefox 0.9.3
• mozilla firefox 0.10
• mozilla firefox 0.10.1
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.4.1
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.0.12
• mozilla firefox 1.5.1
• mozilla firefox 1.5.2
• mozilla firefox 1.5.3
• mozilla firefox 1.5.4
• mozilla firefox 1.5.5
• mozilla firefox 1.5.6
• mozilla firefox 1.5.7
• mozilla firefox 1.5.8
• mozilla firefox 1.8
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.3
• mozilla firefox 2.0.0.4
• mozilla firefox 2.0.0.5
• mozilla firefox 2.0.0.6
• mozilla seamonkey (<= 1.1.4)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
… and 11 more
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 h20000.www2.hp.com
- http://lcamtuf.coredump.cx/ietrap/ff/ lcamtuf.coredump.cx
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.html lists.grok.org.uk
- http://osvdb.org/33809 osvdb.org
- http://secunia.com/advisories/27276 Vendor Advisory
- http://secunia.com/advisories/27298 Vendor Advisory
- http://secunia.com/advisories/27311 Vendor Advisory
- http://secunia.com/advisories/27315 Vendor Advisory
- http://secunia.com/advisories/27325 Vendor Advisory
- http://secunia.com/advisories/27327 Vendor Advisory
- http://secunia.com/advisories/27335 Vendor Advisory
- http://secunia.com/advisories/27336 Vendor Advisory
- http://secunia.com/advisories/27356 Vendor Advisory
- http://secunia.com/advisories/27360 Vendor Advisory
- http://secunia.com/advisories/27383 Vendor Advisory
- http://secunia.com/advisories/27387 Vendor Advisory
- http://secunia.com/advisories/27403 Vendor Advisory
- http://secunia.com/advisories/27414 Vendor Advisory
- http://secunia.com/advisories/27425 Vendor Advisory
- http://secunia.com/advisories/27480 Vendor Advisory
- http://secunia.com/advisories/27665 Vendor Advisory
- http://secunia.com/advisories/27680 Vendor Advisory
- http://secunia.com/advisories/28398 Vendor Advisory
- http://securityreason.com/securityalert/2310 securityreason.com
- http://securitytracker.com/id?1018837 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 sunsolve.sun.com
- http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html support.novell.com
- http://www.debian.org/security/2007/dsa-1392 www.debian.org
- http://www.debian.org/security/2007/dsa-1396 www.debian.org
- http://www.debian.org/security/2007/dsa-1401 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml www.gentoo.org
- http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 www.mandriva.com
- http://www.mozilla.org/security/announce/2007/mfsa2007-30.html www.mozilla.org
- http://www.novell.com/linux/security/advisories/2007_57_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0979.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0980.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0981.html Vendor Advisory
- http://www.securityfocus.com/archive/1/461007/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/461023/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/482876/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/482925/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/482932/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22688 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-536-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2007/3544 www.vupen.com
- http://www.vupen.com/english/advisories/2007/3587 www.vupen.com
- http://www.vupen.com/english/advisories/2008/0083 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=371360 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32647 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32649 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1858 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11665 oval.cisecurity.org
- https://usn.ubuntu.com/535-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html www.redhat.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 h20000.www2.hp.com
- http://lcamtuf.coredump.cx/ietrap/ff/ lcamtuf.coredump.cx
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.html lists.grok.org.uk
- http://osvdb.org/33809 osvdb.org
- http://secunia.com/advisories/27276 Vendor Advisory
- http://secunia.com/advisories/27298 Vendor Advisory
- http://secunia.com/advisories/27311 Vendor Advisory
- http://secunia.com/advisories/27315 Vendor Advisory
- http://secunia.com/advisories/27325 Vendor Advisory
- http://secunia.com/advisories/27327 Vendor Advisory
- http://secunia.com/advisories/27335 Vendor Advisory
- http://secunia.com/advisories/27336 Vendor Advisory
- http://secunia.com/advisories/27356 Vendor Advisory
- http://secunia.com/advisories/27360 Vendor Advisory
- http://secunia.com/advisories/27383 Vendor Advisory
- http://secunia.com/advisories/27387 Vendor Advisory
- http://secunia.com/advisories/27403 Vendor Advisory
- http://secunia.com/advisories/27414 Vendor Advisory
- http://secunia.com/advisories/27425 Vendor Advisory
- http://secunia.com/advisories/27480 Vendor Advisory
- http://secunia.com/advisories/27665 Vendor Advisory
- http://secunia.com/advisories/27680 Vendor Advisory
- http://secunia.com/advisories/28398 Vendor Advisory
- http://securityreason.com/securityalert/2310 securityreason.com