NVD

Id
53204  
Name
CVE-2007-0996  
Description
The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-02-26  
Modified Date
2011-03-07  
Seq
2007-0996  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269283 53204 CVE-2007-0996 20070202-01-P  View
269284 53204 CVE-2007-0996 20070301-01-P  View
269285 53204 CVE-2007-0996 FEDORA-2007-281  View
269286 53204 CVE-2007-0996 FEDORA-2007-293  View
269287 53204 CVE-2007-0996 SSRT061181  View
269288 53204 CVE-2007-0996 SUSE-SA:2007:019  View
269289 53204 CVE-2007-0996 oval:org.mitre.oval:def:10086  View
269290 53204 CVE-2007-0996 RHSA-2007:0077  View
269291 53204 CVE-2007-0996 SSA:2007-066-05  View
269292 53204 CVE-2007-0996 SSA:2007-066-03  View
269293 53204 CVE-2007-0996 DSA-1336  View
269294 53204 CVE-2007-0996 http://www.hardened-php.net/advisory_032007.142.html  View
269295 53204 CVE-2007-0996 MDKSA-2007:050  View
269296 53204 CVE-2007-0996 http://www.mozilla.org/security/announce/2007/mfsa2007-02.html  View
269297 53204 CVE-2007-0996 SUSE-SA:2007:022  View
269298 53204 CVE-2007-0996 RHSA-2007:0078  View
269299 53204 CVE-2007-0996 RHSA-2007:0079  View
269300 53204 CVE-2007-0996 RHSA-2007:0097  View
269301 53204 CVE-2007-0996 RHSA-2007:0108  View
269302 53204 CVE-2007-0996 20070223 Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability  View
269303 53204 CVE-2007-0996 20070226 rPSA-2007-0040-1 firefox  View
269304 53204 CVE-2007-0996 22694  View
269305 53204 CVE-2007-0996 1017702  View
269306 53204 CVE-2007-0996 USN-428-1  View
269307 53204 CVE-2007-0996 ADV-2007-0718  View
269308 53204 CVE-2007-0996 https://issues.rpath.com/browse/RPL-1103  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51515 JVNDB-2007-000177 Mozilla Firefox/SeaMonkey における子フレームの文字セットの継承によるクロスサイトスクリプティングの脆弱性 Mozilla Firefox および SeaMonkey には、文字セットが指定されていない子フレームにおいて親ウィンドウの文字セットを継承しまうため、文字セットや文字エンコーディングを指定していないサイトに対するクロスサイトスクリプティングの脆弱性が存在します。Mozilla の情報において、UTF-7 文字セットを使用しての事例が示されています。 CVE-2007-0996 24351 CVE-2007-0996 53204 5.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000177.html 2007-02-26 2007-08-01 View