NVD

Id
55243  
Name
CVE-2007-3089  
Description
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-06-06  
Modified Date
2013-07-06  
Seq
2007-3089  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280691 55243 CVE-2007-3089 ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt  View
280692 55243 CVE-2007-3089 20070701-01-P  View
280693 55243 CVE-2007-3089 20070604 Assorted browser vulnerabilities  View
280694 55243 CVE-2007-3089 HPSBUX02153  View
280695 55243 CVE-2007-3089 http://lcamtuf.coredump.cx/ifsnatch/  View
280696 55243 CVE-2007-3089 oval:org.mitre.oval:def:11122  View
280697 55243 CVE-2007-3089 2781  View
280698 55243 CVE-2007-3089 103177  View
280699 55243 CVE-2007-3089 201516  View
280700 55243 CVE-2007-3089 http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html  View
280701 55243 CVE-2007-3089 DSA-1337  View
280702 55243 CVE-2007-3089 DSA-1338  View
280703 55243 CVE-2007-3089 DSA-1339  View
280704 55243 CVE-2007-3089 GLSA-200708-09  View
280705 55243 CVE-2007-3089 VU#143297  View
280706 55243 CVE-2007-3089 MDKSA-2007:152  View
280707 55243 CVE-2007-3089 http://www.mozilla.org/security/announce/2007/mfsa2007-20.html  View
280708 55243 CVE-2007-3089 SUSE-SA:2007:049  View
280709 55243 CVE-2007-3089 RHSA-2007:0722  View
280710 55243 CVE-2007-3089 RHSA-2007:0723  View
280711 55243 CVE-2007-3089 RHSA-2007:0724  View
280712 55243 CVE-2007-3089 20070604 Assorted browser vulnerabilities  View
280713 55243 CVE-2007-3089 20070720 rPSA-2007-0148-1 firefox thunderbird  View
280714 55243 CVE-2007-3089 20070724 FLEA-2007-0033-1: firefox thunderbird  View
280715 55243 CVE-2007-3089 24286  View
280716 55243 CVE-2007-3089 1018412  View
280717 55243 CVE-2007-3089 USN-490-1  View
280718 55243 CVE-2007-3089 TA07-199A  View
280719 55243 CVE-2007-3089 ADV-2007-2564  View
280720 55243 CVE-2007-3089 ADV-2007-4256  View
280721 55243 CVE-2007-3089 firefox-iframe-security-bypass(34701)  View
280722 55243 CVE-2007-3089 https://bugzilla.mozilla.org/show_bug.cgi?id=381300  View
280723 55243 CVE-2007-3089 https://bugzilla.mozilla.org/show_bug.cgi?id=382686  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51880 JVNDB-2007-000543 Mozilla Firefox においてコンテンツが偽装される問題 Mozilla Firefox には、document.write() メソッドの実装に不備があり、IFRAME コンテンツの読み込み中に about:blank フレームにおいて、任意のコンテンツ (HTML や JavaScript) を挿入することが可能な問題が存在します。 CVE-2007-3089 26444 CVE-2007-3089 55243 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000543.html 2007-06-06 2008-01-11 View