NVD

Id
55662  
Name
CVE-2007-3511  
Description
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-07-03  
Modified Date
2013-07-23  
Seq
2007-3511  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
283092 55662 CVE-2007-3511 20070630 New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities  View
283093 55662 CVE-2007-3511 20070630 Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities  View
283094 55662 CVE-2007-3511 HPSBUX02153  View
283095 55662 CVE-2007-3511 oval:org.mitre.oval:def:9763  View
283096 55662 CVE-2007-3511 1018837  View
283097 55662 CVE-2007-3511 http://sla.ckers.org/forum/read.php?3,13142  View
283098 55662 CVE-2007-3511 201516  View
283099 55662 CVE-2007-3511 http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html  View
283100 55662 CVE-2007-3511 DSA-1392  View
283101 55662 CVE-2007-3511 DSA-1396  View
283102 55662 CVE-2007-3511 DSA-1401  View
283103 55662 CVE-2007-3511 MDKSA-2007:202  View
283104 55662 CVE-2007-3511 http://www.mozilla.org/security/announce/2007/mfsa2007-32.html  View
283105 55662 CVE-2007-3511 SUSE-SA:2007:057  View
283106 55662 CVE-2007-3511 RHSA-2007:0979  View
283107 55662 CVE-2007-3511 RHSA-2007:0980  View
283108 55662 CVE-2007-3511 RHSA-2007:0981  View
283109 55662 CVE-2007-3511 20071026 rPSA-2007-0225-1 firefox  View
283110 55662 CVE-2007-3511 20071029 FLEA-2007-0062-1 firefox  View
283111 55662 CVE-2007-3511 20071029 rPSA-2007-0225-2 firefox thunderbird  View
283112 55662 CVE-2007-3511 24725  View
283113 55662 CVE-2007-3511 USN-536-1  View
283114 55662 CVE-2007-3511 USN-535-1  View
283115 55662 CVE-2007-3511 ADV-2007-3544  View
283116 55662 CVE-2007-3511 ADV-2007-3587  View
283117 55662 CVE-2007-3511 ADV-2008-0083  View
283118 55662 CVE-2007-3511 firefox-focus-security-bypass(35299)  View
283119 55662 CVE-2007-3511 http://yathong.googlepages.com/FirefoxFocusBug.html  View
283120 55662 CVE-2007-3511 https://issues.rpath.com/browse/RPL-1858  View
283121 55662 CVE-2007-3511 FEDORA-2007-3431  View
283122 55662 CVE-2007-3511 FEDORA-2007-2601  View
283123 55662 CVE-2007-3511 FEDORA-2007-2664  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52196 JVNDB-2007-000886 Mozilla Firefox/SeaMonkey のフォーカス処理におけるキーの操作を入手可能な脆弱性 Mozilla Firefox および SeaMonkey において、onkeydown イベントのフォーカス処理には、label における「for」属性を利用してフィールドフォーカスを変更され、キーストロークをコピーされる情報漏えいの脆弱性が存在します。 CVE-2007-3511 26866 CVE-2007-3511 55662 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000886.html 2007-07-03 2008-01-23 View