NVD

Id
53292  
Name
CVE-2007-1084  
Description
Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into saving a bookmarklet with a data: scheme, which is executed in the context of the last visited web page.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-22  
Modified Date
2011-03-07  
Seq
2007-1084  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269802 53292 CVE-2007-1084 20070221 Firefox bookmark cross-domain surfing vulnerability  View
269803 53292 CVE-2007-1084 http://lcamtuf.coredump.cx/ffbook  View
269804 53292 CVE-2007-1084 http://lcamtuf.coredump.cx/ffbook/  View
269805 53292 CVE-2007-1084 2304  View
269806 53292 CVE-2007-1084 http://www.heise-security.co.uk/news/85728  View
269807 53292 CVE-2007-1084 20070221 Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability  View
269808 53292 CVE-2007-1084 20070221 Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability  View
269809 53292 CVE-2007-1084 20070221 Firefox bookmark cross-domain surfing vulnerability  View
269810 53292 CVE-2007-1084 20070222 Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability  View
269811 53292 CVE-2007-1084 20070223 Re: [Full-disclosure] Firefox bookmark cross-domain surfingvulnerability  View
269812 53292 CVE-2007-1084 22666  View
269813 53292 CVE-2007-1084 https://bugzilla.mozilla.org/show_bug.cgi?id=371179  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54720 JVNDB-2007-003412 Mozilla Firefox における同一ドメインポリシーを回避される脆弱性 Mozilla Firefox は、ブックマークレット保存前にユーザにプロンプト表示をしないため、同一ドメインポリシーを回避される脆弱性が存在します。 CVE-2007-1084 24439 CVE-2007-1084 53292 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003412.html 2007-02-21 2012-09-25 View