NVD

Id
55806  
Name
CVE-2007-3656  
Description
Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-10  
Modified Date
2012-10-30  
Seq
2007-3656  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
283725 55806 CVE-2007-3656 ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt  View
283726 55806 CVE-2007-3656 20070701-01-P  View
283727 55806 CVE-2007-3656 HPSBUX02153  View
283728 55806 CVE-2007-3656 http://lcamtuf.coredump.cx/ffcache/  View
283729 55806 CVE-2007-3656 oval:org.mitre.oval:def:9105  View
283730 55806 CVE-2007-3656 2872  View
283731 55806 CVE-2007-3656 103177  View
283732 55806 CVE-2007-3656 201516  View
283733 55806 CVE-2007-3656 http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html  View
283734 55806 CVE-2007-3656 DSA-1337  View
283735 55806 CVE-2007-3656 DSA-1338  View
283736 55806 CVE-2007-3656 DSA-1339  View
283737 55806 CVE-2007-3656 GLSA-200708-09  View
283738 55806 CVE-2007-3656 MDKSA-2007:152  View
283739 55806 CVE-2007-3656 http://www.mozilla.org/security/announce/2007/mfsa2007-24.html  View
283740 55806 CVE-2007-3656 SUSE-SA:2007:049  View
283741 55806 CVE-2007-3656 RHSA-2007:0722  View
283742 55806 CVE-2007-3656 RHSA-2007:0724  View
283743 55806 CVE-2007-3656 20070709 Firefox wyciwyg:// cache zone bypass  View
283744 55806 CVE-2007-3656 20070720 rPSA-2007-0148-1 firefox thunderbird  View
283745 55806 CVE-2007-3656 20070724 FLEA-2007-0033-1: firefox thunderbird  View
283746 55806 CVE-2007-3656 24831  View
283747 55806 CVE-2007-3656 1018411  View
283748 55806 CVE-2007-3656 USN-490-1  View
283749 55806 CVE-2007-3656 ADV-2007-4256  View
283750 55806 CVE-2007-3656 mozilla-wyciwyg-security-bypass(35298)  View
283751 55806 CVE-2007-3656 https://bugzilla.mozilla.org/show_bug.cgi?id=387333  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51882 JVNDB-2007-000545 Mozilla Firefox の wyciwyg URI における同一生成元ポリシーのチェックを回避される問題 Mozilla Firefox には wyciwyg URI の取り扱いに不備があり、セキュリティゾーンチェックを回避される問題が存在します。 CVE-2007-3656 27011 CVE-2007-3656 55806 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000545.html 2007-07-10 2008-01-11 View