NVD

Id
53000  
Name
CVE-2007-0780  
Description
browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-26  
Modified Date
2011-03-07  
Seq
2007-0780  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268038 53000 CVE-2007-0780 20070202-01-P  View
268039 53000 CVE-2007-0780 20070301-01-P  View
268040 53000 CVE-2007-0780 FEDORA-2007-281  View
268041 53000 CVE-2007-0780 FEDORA-2007-293  View
268042 53000 CVE-2007-0780 SSRT061181  View
268043 53000 CVE-2007-0780 SUSE-SA:2007:019  View
268044 53000 CVE-2007-0780 oval:org.mitre.oval:def:9884  View
268045 53000 CVE-2007-0780 RHSA-2007:0077  View
268046 53000 CVE-2007-0780 GLSA-200703-04  View
268047 53000 CVE-2007-0780 SSA:2007-066-05  View
268048 53000 CVE-2007-0780 SSA:2007-066-03  View
268049 53000 CVE-2007-0780 GLSA-200703-08  View
268050 53000 CVE-2007-0780 MDKSA-2007:050  View
268051 53000 CVE-2007-0780 http://www.mozilla.org/security/announce/2007/mfsa2007-05.html  View
268052 53000 CVE-2007-0780 SUSE-SA:2007:022  View
268053 53000 CVE-2007-0780 RHSA-2007:0078  View
268054 53000 CVE-2007-0780 RHSA-2007:0079  View
268055 53000 CVE-2007-0780 RHSA-2007:0097  View
268056 53000 CVE-2007-0780 RHSA-2007:0108  View
268057 53000 CVE-2007-0780 20070226 rPSA-2007-0040-1 firefox  View
268058 53000 CVE-2007-0780 20070303 rPSA-2007-0040-3 firefox thunderbird  View
268059 53000 CVE-2007-0780 22694  View
268060 53000 CVE-2007-0780 1017702  View
268061 53000 CVE-2007-0780 USN-428-1  View
268062 53000 CVE-2007-0780 ADV-2007-0718  View
268063 53000 CVE-2007-0780 mozilla-dataurl-xss(32667)  View
268064 53000 CVE-2007-0780 https://bugzilla.mozilla.org/show_bug.cgi?id=354973  View
268065 53000 CVE-2007-0780 https://issues.rpath.com/browse/RPL-1081  View
268066 53000 CVE-2007-0780 https://issues.rpath.com/browse/RPL-1103  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51517 JVNDB-2007-000179 Mozilla Firefox/SeaMonkey のブロックされたポップアップ表示によるクロスサイトスクリプティングの脆弱性 Mozilla Firefox および SeaMonkey には、ブロックされたポップアップを表示した際に、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0780 24135 CVE-2007-0780 53000 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000179.html 2007-02-26 2007-08-01 View