NVD

Id
53202  
Name
CVE-2007-0994  
Description
A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-05  
Modified Date
2011-09-20  
Seq
2007-0994  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269237 53202 CVE-2007-0994 20070202-01-P  View
269238 53202 CVE-2007-0994 20070301-01-P  View
269239 53202 CVE-2007-0994 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733  View
269240 53202 CVE-2007-0994 SSRT061181  View
269241 53202 CVE-2007-0994 SUSE-SA:2007:019  View
269242 53202 CVE-2007-0994 oval:org.mitre.oval:def:9749  View
269243 53202 CVE-2007-0994 1017726  View
269244 53202 CVE-2007-0994 SSA:2007-066-05  View
269245 53202 CVE-2007-0994 SSA:2007-066-03  View
269246 53202 CVE-2007-0994 DSA-1336  View
269247 53202 CVE-2007-0994 http://www.mozilla.org/security/announce/2007/mfsa2007-09.html  View
269248 53202 CVE-2007-0994 SUSE-SA:2007:022  View
269249 53202 CVE-2007-0994 RHSA-2007:0097  View
269250 53202 CVE-2007-0994 22826  View
269251 53202 CVE-2007-0994 ADV-2007-0823  View
269252 53202 CVE-2007-0994 https://issues.rpath.com/browse/RPL-1103  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51524 JVNDB-2007-000186 Mozilla Firefox/SeaMonkey における IMG タグ内の JavaScript URI によるコード実行の脆弱性 Mozilla Firefox および SeaMonkey には、img, link, style タグに JavaScript URI が指定された Web コンテンツの表示により任意の JavaScript を実行してしまう脆弱性が存在します。 CVE-2007-0994 24349 CVE-2007-0994 53202 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000186.html 2007-03-05 2007-07-31 View