CVE-2007-0996

Mozilla Firefox <1.5.0.10 & SeaMonkey <1.0.8 - XSS

Title source: llm
STIX 2.1

Description

The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.

References (41)

Core 41
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0078.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24395
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10086
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461336/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24328
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0108.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24384
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24457
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24343
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1336
Patch, Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2007/mfsa2007-02.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0718
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24650
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-428-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24320
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25588
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1103
Various Sources vendor-advisory x_refsource_suse
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24342
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24287
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461076/100/0/threaded
Vendor Advisory x_refsource_misc
http://www.hardened-php.net/advisory_032007.142.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22694
Mailing List vendor-advisory x_refsource_fedora
http://fedoranews.org/cms/node/2713
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0097.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017702
Mailing List vendor-advisory x_refsource_fedora
http://fedoranews.org/cms/node/2728
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24205
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24333
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/33812
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:050
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24290
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24455
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2007-0077.html
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0079.html

Scores

EPSS 0.0206
EPSS Percentile 79.2%

Details

Status published
Products (20)
mozilla/firefox 1.5 (3 CPE variants)
mozilla/firefox 1.5.0.1
mozilla/firefox 1.5.0.2
mozilla/firefox 1.5.0.3
mozilla/firefox 1.5.0.4
mozilla/firefox 1.5.0.5
mozilla/firefox 1.5.0.6
mozilla/firefox 1.5.0.7
mozilla/firefox 1.5.0.8
mozilla/firefox 1.5.0.9
... and 10 more
Published Feb 27, 2007
Tracked Since Feb 18, 2026