CVEvulnerability
CVE-2007-2060
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.
Affected configurations
• wizz computers wizz rss reader (<= 2.1.8)
References
- http://osvdb.org/34534 osvdb.org
- http://secunia.com/advisories/24913 secunia.com
- http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/ wizzrss.blat.co.za
- http://www.kb.cert.org/vuls/id/319464 Patch, US Government Resource
- http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T www.kb.cert.org
- http://www.securityfocus.com/bid/23523 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1425 www.vupen.com
- https://addons.mozilla.org/en-US/firefox/addon/424 addons.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33693 exchange.xforce.ibmcloud.com
- http://osvdb.org/34534 osvdb.org
- http://secunia.com/advisories/24913 secunia.com
- http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/ wizzrss.blat.co.za
- http://www.kb.cert.org/vuls/id/319464 Patch, US Government Resource
- http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T www.kb.cert.org
- http://www.securityfocus.com/bid/23523 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1425 www.vupen.com
- https://addons.mozilla.org/en-US/firefox/addon/424 addons.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33693 exchange.xforce.ibmcloud.com