Lucene search

K
cveMitreCVE-2007-1736
HistoryMar 28, 2007 - 10:19 p.m.

CVE-2007-1736

2007-03-2822:19:00
mitre
web.nvd.nist.gov
31
mozilla
firefox
2.0.0.3
phishing
protection
bypass
vulnerability
nvd
cve-2007-1736

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

81.4%

Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection.

Affected configurations

Nvd
Node
mozillafirefoxMatch2.0.0.3
VendorProductVersionCPE
mozillafirefox2.0.0.3cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

81.4%