NVD

Id
53193  
Name
CVE-2007-0981  
Description
Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-15  
Modified Date
2011-03-07  
Seq
2007-0981  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269145 53193 CVE-2007-0981 20070202-01-P  View
269146 53193 CVE-2007-0981 20070301-01-P  View
269147 53193 CVE-2007-0981 FEDORA-2007-281  View
269148 53193 CVE-2007-0981 FEDORA-2007-293  View
269149 53193 CVE-2007-0981 SSRT061181  View
269150 53193 CVE-2007-0981 http://lcamtuf.dione.cc/ffhostname.html  View
269151 53193 CVE-2007-0981 SUSE-SA:2007:019  View
269152 53193 CVE-2007-0981 oval:org.mitre.oval:def:9730  View
269153 53193 CVE-2007-0981 RHSA-2007:0077  View
269154 53193 CVE-2007-0981 GLSA-200703-04  View
269155 53193 CVE-2007-0981 2262  View
269156 53193 CVE-2007-0981 1017654  View
269157 53193 CVE-2007-0981 SSA:2007-066-05  View
269158 53193 CVE-2007-0981 SSA:2007-066-03  View
269159 53193 CVE-2007-0981 DSA-1336  View
269160 53193 CVE-2007-0981 GLSA-200703-08  View
269161 53193 CVE-2007-0981 VU#885753  View
269162 53193 CVE-2007-0981 MDKSA-2007:050  View
269163 53193 CVE-2007-0981 http://www.mozilla.org/security/announce/2007/mfsa2007-07.html  View
269164 53193 CVE-2007-0981 SUSE-SA:2007:022  View
269165 53193 CVE-2007-0981 RHSA-2007:0078  View
269166 53193 CVE-2007-0981 RHSA-2007:0079  View
269167 53193 CVE-2007-0981 RHSA-2007:0097  View
269168 53193 CVE-2007-0981 RHSA-2007:0108  View
269169 53193 CVE-2007-0981 20070215 Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability  View
269170 53193 CVE-2007-0981 20070214 Firefox: serious cookie stealing / same-domain bypass vulnerability  View
269171 53193 CVE-2007-0981 20070226 rPSA-2007-0040-1 firefox  View
269172 53193 CVE-2007-0981 20070303 rPSA-2007-0040-3 firefox thunderbird  View
269173 53193 CVE-2007-0981 22566  View
269174 53193 CVE-2007-0981 USN-428-1  View
269175 53193 CVE-2007-0981 ADV-2007-0624  View
269176 53193 CVE-2007-0981 ADV-2007-0718  View
269177 53193 CVE-2007-0981 ADV-2008-0083  View
269178 53193 CVE-2007-0981 firefox-locationhostname-security-bypass(32533)  View
269179 53193 CVE-2007-0981 https://bugzilla.mozilla.org/show_bug.cgi?id=370445  View
269180 53193 CVE-2007-0981 https://issues.rpath.com/browse/RPL-1081  View
269181 53193 CVE-2007-0981 https://issues.rpath.com/browse/RPL-1103  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51500 JVNDB-2007-000162 Mozilla Firefox/SeaMonkey における同一生成元ポリシーを回避される脆弱性 Mozilla Firefox および SeaMonkey には、DOM プロパティの location.hostname に null 文字を含む URI を書き込むことで、同一生成元ポリシー (Same origin policy) を回避可能な脆弱性が存在します。 CVE-2007-0981 24336 CVE-2007-0981 53193 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000162.html 2007-02-14 2007-07-31 View