CVE-2007-1095

Mozilla Firefox <2.0.0.8 & SeaMonkey <1.1.5 - XSS

Title source: llm
STIX 2.1

Description

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.

References (56)

Core 56
Core References
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1858
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32647
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/535-1/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482876/100/200/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/2310
Various Sources x_refsource_misc
http://lcamtuf.coredump.cx/ietrap/ff/
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3587
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27414
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482925/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461023/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27360
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27298
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27315
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1018837
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11665
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27327
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3544
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27276
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1401
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/33809
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1392
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0980.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27383
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_57_mozilla.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27356
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0981.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0083
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27387
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461007/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27403
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32649
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27336
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1396
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27425
Issue Tracking x_refsource_misc
https://bugzilla.mozilla.org/show_bug.cgi?id=371360
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28398
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27311
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27325
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27665
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0979.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27335
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27480
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27680
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22688
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482932/100/200/threaded
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-536-1

Scores

EPSS 0.0219
EPSS Percentile 80.5%

Details

Status published
Products (46)
mozilla/firefox 0.1
mozilla/firefox 0.2
mozilla/firefox 0.3
mozilla/firefox 0.4
mozilla/firefox 0.5
mozilla/firefox 0.6
mozilla/firefox 0.6.1
mozilla/firefox 0.7
mozilla/firefox 0.7.1
mozilla/firefox 0.8
... and 36 more
Published Feb 26, 2007
Tracked Since Feb 18, 2026