Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-1736
HistoryMar 28, 2007 - 12:00 a.m.

CVE-2007-1736

2007-03-2800:00:00
ubuntu.com
ubuntu.com
10

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

81.4%

Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2)
iframe HTML tags against the phishing site blacklist, which allows remote
attackers to bypass phishing protection.

Notes

Author Note
kees phishing filter bypass
mdeslaur no impact, ignoring

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

81.4%

Related for UB:CVE-2007-1736