NVD

Id
55988  
Name
CVE-2007-3844  
Description
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-07  
Modified Date
2011-03-07  
Seq
2007-3844  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284825 55988 CVE-2007-3844 http://bugzilla.mozilla.org/show_bug.cgi?id=388121  View
284826 55988 CVE-2007-3844 HPSBUX02153  View
284827 55988 CVE-2007-3844 HPSBUX02156  View
284828 55988 CVE-2007-3844 oval:org.mitre.oval:def:9493  View
284829 55988 CVE-2007-3844 1018479  View
284830 55988 CVE-2007-3844 1018480  View
284831 55988 CVE-2007-3844 1018481  View
284832 55988 CVE-2007-3844 SSA:2007-213-01  View
284833 55988 CVE-2007-3844 103177  View
284834 55988 CVE-2007-3844 201516  View
284835 55988 CVE-2007-3844 http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html  View
284836 55988 CVE-2007-3844 DSA-1344  View
284837 55988 CVE-2007-3844 DSA-1345  View
284838 55988 CVE-2007-3844 DSA-1346  View
284839 55988 CVE-2007-3844 DSA-1391  View
284840 55988 CVE-2007-3844 GLSA-200708-09  View
284841 55988 CVE-2007-3844 MDKSA-2007:152  View
284842 55988 CVE-2007-3844 MDVSA-2007:047  View
284843 55988 CVE-2007-3844 MDVSA-2008:047  View
284844 55988 CVE-2007-3844 http://www.mozilla.org/security/announce/2007/mfsa2007-26.html  View
284845 55988 CVE-2007-3844 SUSE-SA:2007:057  View
284846 55988 CVE-2007-3844 RHSA-2007:0979  View
284847 55988 CVE-2007-3844 RHSA-2007:0980  View
284848 55988 CVE-2007-3844 RHSA-2007:0981  View
284849 55988 CVE-2007-3844 20070801 FLEA-2007-0039-1 firefox  View
284850 55988 CVE-2007-3844 20070803 FLEA-2007-0040-1 thunderbird  View
284851 55988 CVE-2007-3844 25142  View
284852 55988 CVE-2007-3844 USN-493-1  View
284853 55988 CVE-2007-3844 USN-503-1  View
284854 55988 CVE-2007-3844 ADV-2007-3587  View
284855 55988 CVE-2007-3844 ADV-2007-4256  View
284856 55988 CVE-2007-3844 ADV-2008-0082  View
284857 55988 CVE-2007-3844 https://issues.rpath.com/browse/RPL-1600  View
284858 55988 CVE-2007-3844 FEDORA-2007-3431  View
284859 55988 CVE-2007-3844 FEDORA-2007-2601  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51927 JVNDB-2007-000590 Mozilla 製品における chrome 特権で about:blank を生成される問題 Mozilla 製品には、javascript: や data: リンクを挿入できるアドオンを使用されることで、chrome 特権で about:blank を生成される問題が存在します。 CVE-2007-3844 27199 CVE-2007-3844 55988 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000590.html 2007-07-30 2008-01-11 View