CVE

Id
26868  
CVE No.
CVE-2007-3511  
Status
Candidate  
Description
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.  
Phase
Assigned (20070702)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274164 26868 CVE-2007-3511 BUGTRAQ:20071029 FLEA-2007-0062-1 firefox  View
274165 26868 CVE-2007-3511 URL:http://www.securityfocus.com/archive/1/archive/1/482925/100/0/threaded  View
274166 26868 CVE-2007-3511 BUGTRAQ:20071026 rPSA-2007-0225-1 firefox  View
274167 26868 CVE-2007-3511 URL:http://www.securityfocus.com/archive/1/archive/1/482876/100/200/threaded  View
274168 26868 CVE-2007-3511 BUGTRAQ:20071029 rPSA-2007-0225-2 firefox thunderbird  View
274169 26868 CVE-2007-3511 URL:http://www.securityfocus.com/archive/1/archive/1/482932/100/200/threaded  View
274170 26868 CVE-2007-3511 FULLDISC:20070630 New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities  View
274171 26868 CVE-2007-3511 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0646.html  View
274172 26868 CVE-2007-3511 FULLDISC:20070630 Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities  View
274173 26868 CVE-2007-3511 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0658.html  View
274174 26868 CVE-2007-3511 MISC:http://yathong.googlepages.com/FirefoxFocusBug.html  View
274175 26868 CVE-2007-3511 MISC:http://sla.ckers.org/forum/read.php?3,13142  View
274176 26868 CVE-2007-3511 CONFIRM:http://www.mozilla.org/security/announce/2007/mfsa2007-32.html  View
274177 26868 CVE-2007-3511 CONFIRM:https://issues.rpath.com/browse/RPL-1858  View
274178 26868 CVE-2007-3511 CONFIRM:http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html  View
274179 26868 CVE-2007-3511 DEBIAN:DSA-1396  View
274180 26868 CVE-2007-3511 URL:http://www.debian.org/security/2007/dsa-1396  View
274181 26868 CVE-2007-3511 DEBIAN:DSA-1401  View
274182 26868 CVE-2007-3511 URL:http://www.debian.org/security/2007/dsa-1401  View
274183 26868 CVE-2007-3511 DEBIAN:DSA-1392  View
274184 26868 CVE-2007-3511 URL:http://www.debian.org/security/2007/dsa-1392  View
274185 26868 CVE-2007-3511 FEDORA:FEDORA-2007-2601  View
274186 26868 CVE-2007-3511 URL:https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html  View
274187 26868 CVE-2007-3511 FEDORA:FEDORA-2007-2664  View
274188 26868 CVE-2007-3511 URL:https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html  View
274189 26868 CVE-2007-3511 FEDORA:FEDORA-2007-3431  View
274190 26868 CVE-2007-3511 URL:https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html  View
274191 26868 CVE-2007-3511 HP:HPSBUX02153  View
274192 26868 CVE-2007-3511 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742  View
274193 26868 CVE-2007-3511 HP:SSRT061181  View
274194 26868 CVE-2007-3511 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742  View
274195 26868 CVE-2007-3511 MANDRIVA:MDKSA-2007:202  View
274196 26868 CVE-2007-3511 URL:http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202  View
274197 26868 CVE-2007-3511 REDHAT:RHSA-2007:0979  View
274198 26868 CVE-2007-3511 URL:http://www.redhat.com/support/errata/RHSA-2007-0979.html  View
274199 26868 CVE-2007-3511 REDHAT:RHSA-2007:0980  View
274200 26868 CVE-2007-3511 URL:http://www.redhat.com/support/errata/RHSA-2007-0980.html  View
274201 26868 CVE-2007-3511 REDHAT:RHSA-2007:0981  View
274202 26868 CVE-2007-3511 URL:http://www.redhat.com/support/errata/RHSA-2007-0981.html  View
274203 26868 CVE-2007-3511 SUNALERT:201516  View
274204 26868 CVE-2007-3511 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1  View
274205 26868 CVE-2007-3511 SUSE:SUSE-SA:2007:057  View
274206 26868 CVE-2007-3511 URL:http://www.novell.com/linux/security/advisories/2007_57_mozilla.html  View
274207 26868 CVE-2007-3511 UBUNTU:USN-535-1  View
274208 26868 CVE-2007-3511 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-535-1  View
274209 26868 CVE-2007-3511 UBUNTU:USN-536-1  View
274210 26868 CVE-2007-3511 URL:http://www.ubuntu.com/usn/usn-536-1  View
274211 26868 CVE-2007-3511 BID:24725  View
274212 26868 CVE-2007-3511 URL:http://www.securityfocus.com/bid/24725  View
274213 26868 CVE-2007-3511 OSVDB:37994  View
274214 26868 CVE-2007-3511 URL:http://osvdb.org/37994  View
274215 26868 CVE-2007-3511 OVAL:oval:org.mitre.oval:def:9763  View
274216 26868 CVE-2007-3511 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9763  View
274217 26868 CVE-2007-3511 VUPEN:ADV-2007-3544  View
274218 26868 CVE-2007-3511 URL:http://www.vupen.com/english/advisories/2007/3544  View
274219 26868 CVE-2007-3511 VUPEN:ADV-2007-3587  View
274220 26868 CVE-2007-3511 URL:http://www.vupen.com/english/advisories/2007/3587  View
274221 26868 CVE-2007-3511 VUPEN:ADV-2008-0083  View
274222 26868 CVE-2007-3511 URL:http://www.vupen.com/english/advisories/2008/0083  View
274223 26868 CVE-2007-3511 SECTRACK:1018837  View
274224 26868 CVE-2007-3511 URL:http://securitytracker.com/id?1018837  View
274225 26868 CVE-2007-3511 SECUNIA:25904  View
274226 26868 CVE-2007-3511 URL:http://secunia.com/advisories/25904  View
274227 26868 CVE-2007-3511 SECUNIA:27276  View
274228 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27276  View
274229 26868 CVE-2007-3511 SECUNIA:27325  View
274230 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27325  View
274231 26868 CVE-2007-3511 SECUNIA:27327  View
274232 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27327  View
274233 26868 CVE-2007-3511 SECUNIA:27335  View
274234 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27335  View
274235 26868 CVE-2007-3511 SECUNIA:27356  View
274236 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27356  View
274237 26868 CVE-2007-3511 SECUNIA:27383  View
274238 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27383  View
274239 26868 CVE-2007-3511 SECUNIA:27425  View
274240 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27425  View
274241 26868 CVE-2007-3511 SECUNIA:27403  View
274242 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27403  View
274243 26868 CVE-2007-3511 SECUNIA:27480  View
274244 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27480  View
274245 26868 CVE-2007-3511 SECUNIA:27387  View
274246 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27387  View
274247 26868 CVE-2007-3511 SECUNIA:27298  View
274248 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27298  View
274249 26868 CVE-2007-3511 SECUNIA:27336  View
274250 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27336  View
274251 26868 CVE-2007-3511 SECUNIA:27414  View
274252 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27414  View
274253 26868 CVE-2007-3511 SECUNIA:27680  View
274254 26868 CVE-2007-3511 URL:http://secunia.com/advisories/27680  View
274255 26868 CVE-2007-3511 XF:firefox-focus-security-bypass(35299)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52207 JVNDB-2007-000897 Linux Kernel の lcd_write() 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の drivers/usb/misc/usblcd.c には、lcd_write() 関数において、呼び出し元から使用されるメモリの量の制限を適切に処理しないために、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-3513 26868 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000897.html  View