NVD

Id
55883  
Name
CVE-2007-3736  
Description
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script "into another site"s context" via a "timing issue" involving the (1) addEventListener or (2) setTimeout function, probably by setting events that activate after the context has changed.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-07-18  
Modified Date
2011-03-07  
Seq
2007-3736  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284156 55883 CVE-2007-3736 ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt  View
284157 55883 CVE-2007-3736 20070701-01-P  View
284158 55883 CVE-2007-3736 SSRT061181  View
284159 55883 CVE-2007-3736 oval:org.mitre.oval:def:11749  View
284160 55883 CVE-2007-3736 103177  View
284161 55883 CVE-2007-3736 201516  View
284162 55883 CVE-2007-3736 http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html  View
284163 55883 CVE-2007-3736 DSA-1337  View
284164 55883 CVE-2007-3736 DSA-1338  View
284165 55883 CVE-2007-3736 DSA-1339  View
284166 55883 CVE-2007-3736 GLSA-200708-09  View
284167 55883 CVE-2007-3736 MDKSA-2007:152  View
284168 55883 CVE-2007-3736 http://www.mozilla.org/security/announce/2007/mfsa2007-19.html  View
284169 55883 CVE-2007-3736 SUSE-SA:2007:049  View
284170 55883 CVE-2007-3736 RHSA-2007:0722  View
284171 55883 CVE-2007-3736 RHSA-2007:0723  View
284172 55883 CVE-2007-3736 RHSA-2007:0724  View
284173 55883 CVE-2007-3736 20070720 rPSA-2007-0148-1 firefox thunderbird  View
284174 55883 CVE-2007-3736 20070724 FLEA-2007-0033-1: firefox thunderbird  View
284175 55883 CVE-2007-3736 24946  View
284176 55883 CVE-2007-3736 1018410  View
284177 55883 CVE-2007-3736 USN-490-1  View
284178 55883 CVE-2007-3736 ADV-2007-2564  View
284179 55883 CVE-2007-3736 ADV-2007-4256  View
284180 55883 CVE-2007-3736 mozilla-addeventlistener-settimeout-xss(35462)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51877 JVNDB-2007-000540 Mozilla Firefox の addEventListener/setTimeout メソッドにおけるクロスサイトスクリプティングの脆弱性 Mozilla Firefox において、addEventListener() メソッドおよび setTimeout() メソッドを利用することで、ブラウザの同一生成元ポリシーに反して他のサイトにスクリプトを挿入できるクロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3736 27091 CVE-2007-3736 55883 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000540.html 2007-07-17 2008-01-11 View