Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-1256
HistoryMar 03, 2007 - 8:19 p.m.

CVE-2007-1256

2007-03-0320:19:00
CWE-119
[email protected]
web.nvd.nist.gov
24
cve-2007-1256
mozilla firefox
address bar spoofing
favicon spoofing
document source spoofing
arbitrary websites
onunload attribute

6.1 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.3%

JSON

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092.

Related

cvelist 2
ubuntucve 2
prion 2
securityvulns 2
cve 1
cert 1
mozilla 1
openvas 12
freebsd 1
nessus 17
centos 5
ubuntu 2
oraclelinux 3
redhat 3
suse 2
cvelist
cvelist
CVE-2007-1256
2007-03-03 20:00:00
CVE-2007-1092
2007-02-26 17:00:00
ubuntucve
ubuntucve
CVE-2007-1256
2007-03-03 00:00:00
CVE-2007-1092
2007-02-26 00:00:00
prion
prion
Design/Logic Flaw
2007-03-03 20:19:00
Memory corruption
2007-02-26 17:28:00
securityvulns
securityvulns
Multiple browsers OnUnload event handler different vulnerabilities
2007-02-28 00:00:00
Mozilla Foundation Security Advisory 2007-08
2007-02-27 00:00:00
cve
cve
CVE-2007-1092
2007-02-26 17:28:00
cert
cert
Mozilla Firefox fails to properly handle JavaScript onUnload events
2007-02-23 00:00:00
mozilla
mozilla
onUnload + document.write() memory corruption — Mozilla
2007-02-25 00:00:00
openvas
openvas
Mandriva Update for mozilla-firefox MDKSA-2007:050 (mozilla-firefox)
2009-04-09 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:050 (mozilla-firefox)
2009-04-09 00:00:00
Mandriva Update for mozilla-firefox MDKSA-2007:050-1 (mozilla-firefox)
2009-04-09 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (12bd6ecf-c430-11db-95c5-000c6ec775d9)
2007-02-26 00:00:00
CentOS 4 : firefox (CESA-2007:0079)
2007-02-26 00:00:00
Oracle Linux 4 : Firefox (ELSA-2007-0079)
2013-07-12 00:00:00
centos
centos
thunderbird security update
2007-03-04 11:06:21
firefox security update
2007-02-24 13:53:25
seamonkey security update
2007-03-16 07:21:16
ubuntu
ubuntu
Firefox vulnerabilities
2007-03-01 00:00:00
Firefox regression
2007-03-02 00:00:00
oraclelinux
oraclelinux
Critical: Firefox security update
2007-02-24 00:00:00
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
redhat
redhat
(RHSA-2007:0078) Critical: thunderbird security update
2007-03-02 00:00:00
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
(RHSA-2007:0077) Critical: seamonkey security update
2007-02-23 00:00:00
suse
suse
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00

6.1 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.3%

JSON
Related for CVE-2007-1256
cvelist2ubuntucve2prion2securityvulns2cve1cert1mozilla1openvas12freebsd1nessus17centos5ubuntu2oraclelinux3redhat3suse2