Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2007:0724
HistoryJul 18, 2007 - 12:00 a.m.

(RHSA-2007:0724) Critical: firefox security update

2007-07-1800:00:00
access.redhat.com
25

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.938 High

EPSS

Percentile

98.9%

JSON

Mozilla Firefox is an open source Web browser.

Several flaws were found in the way Firefox processed certain malformed
JavaScript code. A web page containing malicious JavaScript code could
cause Firefox to crash or potentially execute arbitrary code as the user
running Firefox. (CVE-2007-3734, CVE-2007-3735, CVE-2007-3737, CVE-2007-3738)

Several content injection flaws were found in the way Firefox handled
certain JavaScript code. A web page containing malicious JavaScript code
could inject arbitrary content into other web pages. (CVE-2007-3736,
CVE-2007-3089)

A flaw was found in the way Firefox cached web pages on the local disk. A
malicious web page may be able to inject arbitrary HTML into a browsing
session if the user reloads a targeted site. (CVE-2007-3656)

Users of Firefox are advised to upgrade to these erratum packages, which
contain backported patches that correct these issues.

Related

nessus 46
fedora 10
oraclelinux 3
osv 9
openvas 54
centos 4
debian 9
redhat 2
freebsd 1
ubuntu 2
gentoo 1
seebug 2
securityvulns 9
suse 2
mozilla 6
checkpoint_advisories 4
prion 9
cve 9
veracode 7
ubuntucve 9
cert 1
nessus
nessus
Oracle Linux 4 / 5 : firefox (ELSA-2007-0724)
2013-07-12 00:00:00
Fedora 7 : seamonkey-1.1.3-1.fc7 (2007-1181)
2007-11-06 00:00:00
Fedora 7 : devhelp-0.13-9.fc7 (2007-1143)
2007-11-06 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: firefox-2.0.0.5-1.fc7
2007-07-18 20:56:30
[SECURITY] Fedora 7 Update: yelp-2.18.1-5.fc7
2007-07-18 20:56:52
[SECURITY] Fedora 7 Update: devhelp-0.13-9.fc7
2007-07-18 20:56:37
oraclelinux
oraclelinux
Critical: seamonkey security update
2007-07-19 00:00:00
Critical: firefox security update
2007-07-19 00:00:00
Moderate: thunderbird security update
2007-07-19 00:00:00
osv
osv
xulrunner
2007-07-22 00:00:00
iceape - several
2007-07-23 00:00:00
iceweasel
2007-07-23 00:00:00
openvas
openvas
Fedora Update for seamonkey FEDORA-2007-1181
2009-02-27 00:00:00
Fedora Update for epiphany-extensions FEDORA-2007-1155
2009-02-27 00:00:00
Debian Security Advisory DSA 1339-1 (iceape)
2008-01-17 00:00:00
centos
centos
seamonkey security update
2007-07-20 05:54:56
firefox security update
2007-07-19 13:36:22
seamonkey security update
2007-07-19 11:53:21
debian
debian
[SECURITY] [DSA 1338-1] New iceweasel packages fix several vulnerabilities
2007-07-23 17:27:52
[SECURITY] [DSA 1339-1] New iceape packages fix several vulnerabilities
2007-07-24 00:00:33
[SECURITY] [DSA 1337-1] New xulrunner packages fix several vulnerabilities
2007-07-22 19:19:22
redhat
redhat
(RHSA-2007:0722) Critical: seamonkey security update
2007-07-18 00:00:00
(RHSA-2007:0723) Moderate: thunderbird security update
2007-07-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-07-17 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2007-07-20 00:00:00
Thunderbird vulnerabilities
2007-08-25 00:00:00
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2007-08-14 00:00:00
seebug
seebug
Mozilla Firefox 2.0.0.4多个远程安全漏洞
2007-07-19 00:00:00
Firefox about:blank IFRME帧跨域访问漏洞
2007-07-20 00:00:00
securityvulns
securityvulns
Mozilla Firefox, Thunderbird, Seamonkey multiple securityvulnerabilities
2007-07-19 00:00:00
Mozilla Foundation Security Advisory 2007-18
2007-07-19 00:00:00
Mozilla Foundation Security Advisory 2007-20
2007-07-19 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2007-08-02 16:31:06
remote code execution in MozillaFirefox,mozilla,seamonkey
2007-10-25 18:13:14
mozilla
mozilla
Crashes with evidence of memory corruption (rv:1.8.1.5) — Mozilla
2007-07-17 00:00:00
Unauthorized access to wyciwyg:// documents — Mozilla
2007-07-17 00:00:00
Frame spoofing while window is loading — Mozilla
2007-07-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Design Mode Deleted Style Reference Memory Corruption - Ver2 (CVE-2007-3734)
2014-12-28 00:00:00
Firefox wyciwyg Cache Manipulation Flaw Information Disclosure - Ver2 (CVE-2007-3656)
2014-12-28 00:00:00
Mozilla Firefox Event Handler Privilege Escalation - Ver2 (CVE-2007-3737)
2014-02-03 00:00:00
prion
prion
Memory corruption
2007-07-18 17:30:00
Design/Logic Flaw
2007-07-10 19:30:00
Memory corruption
2007-07-18 17:30:00
cve
cve
CVE-2007-3734
2007-07-18 17:30:00
CVE-2007-3735
2007-07-18 17:30:00
CVE-2007-3656
2007-07-10 19:30:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:17:15
Arbitrary Code Injection
2020-04-10 00:17:15
Arbitrary Code Execution
2020-04-10 00:17:16
ubuntucve
ubuntucve
CVE-2007-3734
2007-07-18 00:00:00
CVE-2007-3656
2007-07-10 00:00:00
CVE-2007-3738
2007-07-18 00:00:00
cert
cert
Mozilla Firefox allows cross-domain iframe access via JavaScript
2007-06-08 00:00:00

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.938 High

EPSS

Percentile

98.9%

JSON
Related for RHSA-2007:0724
nessus46fedora10oraclelinux3osv9openvas54centos4debian9redhat2freebsd1ubuntu2gentoo1seebug2securityvulns9suse2mozilla6checkpoint_advisories4prion9cve9veracode7ubuntucve9cert1