CVE-2007-0780

browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.

CVSS v2.0 6.8

6.8^/10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References

Link	Resource
http://www.mozilla.org/security/announce/2007/mfsa2007-05.html	Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=354973	Issue Tracking Vendor Advisory
https://issues.rpath.com/browse/RPL-1081	Broken Link
https://issues.rpath.com/browse/RPL-1103	Broken Link
http://fedoranews.org/cms/node/2713	Broken Link
http://fedoranews.org/cms/node/2728	Broken Link
http://security.gentoo.org/glsa/glsa-200703-04.xml	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0079.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2007-0077.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0078.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0097.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0108.html	Third Party Advisory
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html	Broken Link
http://www.ubuntu.com/usn/usn-428-1	Third Party Advisory
http://www.securityfocus.com/bid/22694	Third Party Advisory VDB Entry
http://www.osvdb.org/32107	Broken Link
http://www.securitytracker.com/id?1017702	Third Party Advisory VDB Entry
http://secunia.com/advisories/24238	Third Party Advisory
http://secunia.com/advisories/24287	Third Party Advisory
http://secunia.com/advisories/24290	Third Party Advisory
http://secunia.com/advisories/24205	Third Party Advisory
http://secunia.com/advisories/24328	Third Party Advisory
http://secunia.com/advisories/24333	Third Party Advisory
http://secunia.com/advisories/24343	Third Party Advisory
http://secunia.com/advisories/24320	Third Party Advisory
http://secunia.com/advisories/24293	Third Party Advisory
http://secunia.com/advisories/24393	Third Party Advisory
http://secunia.com/advisories/24395	Third Party Advisory
http://secunia.com/advisories/24384	Third Party Advisory
http://secunia.com/advisories/24437	Third Party Advisory
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc	Broken Link
http://secunia.com/advisories/24650	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:050	Third Party Advisory
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc	Broken Link
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851	Mailing List Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131	Mailing List Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html	Broken Link
http://secunia.com/advisories/24455	Third Party Advisory
http://secunia.com/advisories/24457	Third Party Advisory
http://secunia.com/advisories/24342	Third Party Advisory
http://www.vupen.com/english/advisories/2007/0718	Third Party Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/32667	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9884	Third Party Advisory
http://www.securityfocus.com/archive/1/461809/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/461336/100/0/threaded	Third Party Advisory VDB Entry

Configurations

Configuration 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*

History

24 Jan 2023, 16:19

Type	Values Removed	Values Added
CPE		cpe:2.3:a:predictapp_project:predictapp::::::::
References	~~(MISC) https://github.com/abhilash1985/PredictApp/commit/b067372f3ee26fe1b657121f0f41883ff4461a06 -~~	(MISC) https://github.com/abhilash1985/PredictApp/commit/b067372f3ee26fe1b657121f0f41883ff4461a06 - Patch, Third Party Advisory
References	~~(MISC) https://github.com/abhilash1985/PredictApp/pull/73 -~~	(MISC) https://github.com/abhilash1985/PredictApp/pull/73 - Patch, Third Party Advisory
References	~~(MISC) https://vuldb.com/?id.218387 -~~	(MISC) https://vuldb.com/?id.218387 - Third Party Advisory
References	~~(MISC) https://vuldb.com/?ctiid.218387 -~~	(MISC) https://vuldb.com/?ctiid.218387 - Third Party Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
First Time		Predictapp Project predictapp Predictapp Project

16 Jan 2023, 13:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2007-02-26 08:28

Updated : 2019-10-09 10:52

NVD link : CVE-2007-0780

Mitre link : CVE-2007-0780

Products Affected

No products.

CWE

CWE-79