CVE Vulnerability

CVE-2007-2060

Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
https://addons.mozilla.org/en-US/firefox/addon/424
http://www.kb.cert.org/vuls/id/319464 Patch US Government Resource
http://www.securityfocus.com/bid/23523
http://secunia.com/advisories/24913
http://osvdb.org/34534
http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T
http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/
http://www.vupen.com/english/advisories/2007/1425
https://exchange.xforce.ibmcloud.com/vulnerabilities/33693
Configurations

Configuration 1

cpe:2.3:a:wizz_computers:wizz_rss_reader:*:*:*:*:*:*:*:*
Information

Published : 2007-04-18 03:19

Updated : 2017-07-29 01:31

NVD link : CVE-2007-2060

Mitre link : CVE-2007-2060

Products Affected
No products.
CWE
NVD-CWE-Other