Lucene search

K
freebsdFreeBSDE24797AF-803D-11DC-B787-003048705D5A
HistoryOct 19, 2007 - 12:00 a.m.

firefox -- OnUnload Javascript browser entrapment vulnerability

2007-10-1900:00:00
vuxml.freebsd.org
19

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.962 High

EPSS

Percentile

99.5%

RedHat reports:

Several flaws were found in the way in which Firefox
displayed malformed web content. A web page containing
specially-crafted content could potentially trick a user
into surrendering sensitive information. (CVE-2007-1095,
CVE-2007-3844, CVE-2007-3511, CVE-2007-5334)

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfirefox<ย 2.0.0.8,1UNKNOWN
FreeBSDanynoarchlinux-firefox<ย 2.0.0.8UNKNOWN
FreeBSDanynoarchseamonkey<ย 1.1.5UNKNOWN
FreeBSDanynoarchlinux-seamonkey<ย 1.1.5UNKNOWN

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.962 High

EPSS

Percentile

99.5%