CVE-2007-1095

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.

Link	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.html
http://lcamtuf.coredump.cx/ietrap/ff/
https://bugzilla.mozilla.org/show_bug.cgi?id=371360
http://www.securityfocus.com/bid/22688
http://www.mozilla.org/security/announce/2007/mfsa2007-30.html
https://issues.rpath.com/browse/RPL-1858
http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
http://www.debian.org/security/2007/dsa-1396
http://www.debian.org/security/2007/dsa-1401
http://www.debian.org/security/2007/dsa-1392
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html
http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202
http://www.redhat.com/support/errata/RHSA-2007-0979.html	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0980.html	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0981.html	Vendor Advisory
http://www.novell.com/linux/security/advisories/2007_57_mozilla.html
http://www.ubuntu.com/usn/usn-536-1
http://securitytracker.com/id?1018837
http://secunia.com/advisories/27276	Vendor Advisory
http://secunia.com/advisories/27325	Vendor Advisory
http://secunia.com/advisories/27327	Vendor Advisory
http://secunia.com/advisories/27335	Vendor Advisory
http://secunia.com/advisories/27356	Vendor Advisory
http://secunia.com/advisories/27383	Vendor Advisory
http://secunia.com/advisories/27425	Vendor Advisory
http://secunia.com/advisories/27403	Vendor Advisory
http://secunia.com/advisories/27480	Vendor Advisory
http://secunia.com/advisories/27387	Vendor Advisory
http://secunia.com/advisories/27298	Vendor Advisory
http://secunia.com/advisories/27311	Vendor Advisory
http://secunia.com/advisories/27315	Vendor Advisory
http://secunia.com/advisories/27336	Vendor Advisory
http://secunia.com/advisories/27665	Vendor Advisory
http://secunia.com/advisories/27414	Vendor Advisory
http://securityreason.com/securityalert/2310
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html
http://secunia.com/advisories/27680	Vendor Advisory
http://secunia.com/advisories/27360	Vendor Advisory
http://secunia.com/advisories/28398	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
http://osvdb.org/33809
http://www.vupen.com/english/advisories/2007/3544
http://www.vupen.com/english/advisories/2007/3587
http://www.vupen.com/english/advisories/2008/0083
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
https://exchange.xforce.ibmcloud.com/vulnerabilities/32649
https://exchange.xforce.ibmcloud.com/vulnerabilities/32647
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11665
https://usn.ubuntu.com/535-1/
http://www.securityfocus.com/archive/1/482932/100/200/threaded
http://www.securityfocus.com/archive/1/482925/100/0/threaded
http://www.securityfocus.com/archive/1/482876/100/200/threaded
http://www.securityfocus.com/archive/1/461023/100/0/threaded
http://www.securityfocus.com/archive/1/461007/100/0/threaded

Configuration 1

cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*

---

Published : 2007-02-26 05:28

Updated : 2018-10-16 04:36

---

NVD link : CVE-2007-1095

Mitre link : CVE-2007-1095

No products.

NVD-CWE-Other