NVD

Id
56482  
Name
CVE-2007-4357  
Description
Mozilla Firefox 2.0.0.6 and earlier allows remote attackers to spoof the contents of the status bar via a link to a data: URI containing an encoded URL. NOTE: the severity of this issue has been disputed by a reliable third party, since the intended functionality of the status bar allows it to be modified.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-14  
Modified Date
2008-09-05  
Seq
2007-4357  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
287772 56482 CVE-2007-4357 http://my.opera.com/MichalBucko/blog/firefox-2-0-0-5-uri-encoding-allows-phishing  View
287773 56482 CVE-2007-4357 http://www.eleytt.com/michal.bucko/Eleytt_PhishAGoGo/bucked2.html  View
287774 56482 CVE-2007-4357 20070803 [ELEYTT] 3SIERPIEN2007  View
287775 56482 CVE-2007-4357 20070803 Re: [ELEYTT] 3SIERPIEN2007  View
287776 56482 CVE-2007-4357 20070804 Re:Re: [ELEYTT] 3SIERPIEN2007  View
287777 56482 CVE-2007-4357 20070806 Re: [ELEYTT] 3SIERPIEN2007  View
287778 56482 CVE-2007-4357 20070809 Re:Re: [ELEYTT] 3SIERPIEN2007  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55588 JVNDB-2007-004280 Mozilla Firefox におけるステータスバーのコンテンツを偽造される脆弱性 Mozilla Firefox には、ステータスバーのコンテンツを偽造される脆弱性が存在します。 CVE-2007-4357 27712 CVE-2007-4357 56482 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004280.html 2007-08-14 2012-09-25 View