NVD

Id
57985  
Name
CVE-2007-5960  
Description
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-11-26  
Modified Date
2011-03-07  
Seq
2007-5960  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296962 57985 CVE-2007-5960 http://browser.netscape.com/releasenotes/  View
296963 57985 CVE-2007-5960 http://bugs.gentoo.org/show_bug.cgi?id=198965  View
296964 57985 CVE-2007-5960 http://bugs.gentoo.org/show_bug.cgi?id=200909  View
296965 57985 CVE-2007-5960 HPSBUX02153  View
296966 57985 CVE-2007-5960 SUSE-SA:2007:066  View
296967 57985 CVE-2007-5960 oval:org.mitre.oval:def:9794  View
296968 57985 CVE-2007-5960 GLSA-200712-21  View
296969 57985 CVE-2007-5960 1018995  View
296970 57985 CVE-2007-5960 SSA:2007-333-01  View
296971 57985 CVE-2007-5960 SSA:2007-331-01  View
296972 57985 CVE-2007-5960 231441  View
296973 57985 CVE-2007-5960 1018977  View
296974 57985 CVE-2007-5960 http://wiki.rpath.com/Advisories:rPSA-2008-0093  View
296975 57985 CVE-2007-5960 http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0260  View
296976 57985 CVE-2007-5960 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093  View
296977 57985 CVE-2007-5960 DSA-1424  View
296978 57985 CVE-2007-5960 DSA-1425  View
296979 57985 CVE-2007-5960 MDKSA-2007:246  View
296980 57985 CVE-2007-5960 http://www.mozilla.org/security/announce/2007/mfsa2007-39.html  View
296981 57985 CVE-2007-5960 RHSA-2007:1082  View
296982 57985 CVE-2007-5960 RHSA-2007:1083  View
296983 57985 CVE-2007-5960 RHSA-2007:1084  View
296984 57985 CVE-2007-5960 20080212 FLEA-2008-0001-1 firefox  View
296985 57985 CVE-2007-5960 20080229 rPSA-2008-0093-1 thunderbird  View
296986 57985 CVE-2007-5960 26589  View
296987 57985 CVE-2007-5960 USN-546-2  View
296988 57985 CVE-2007-5960 USN-546-1  View
296989 57985 CVE-2007-5960 ADV-2007-4002  View
296990 57985 CVE-2007-5960 ADV-2007-4018  View
296991 57985 CVE-2007-5960 ADV-2008-0083  View
296992 57985 CVE-2007-5960 ADV-2008-0643  View
296993 57985 CVE-2007-5960 mozilla-http-referer-spoofing(38644)  View
296994 57985 CVE-2007-5960 https://issues.rpath.com/browse/RPL-1984  View
296995 57985 CVE-2007-5960 https://issues.rpath.com/browse/RPL-1995  View
296996 57985 CVE-2007-5960 FEDORA-2007-756  View
296997 57985 CVE-2007-5960 FEDORA-2007-4106  View
296998 57985 CVE-2007-5960 FEDORA-2007-4098  View
296999 57985 CVE-2007-5960 FEDORA-2007-3952  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52305 JVNDB-2007-000995 Mozilla Firefox/SeaMonkey における HTTP Referer ヘッダを偽装可能な脆弱性 Mozilla Firefox および SeaMonkey にはwindow.location プロパティを設定するタイミングに不備があり、CSRF 保護スキームを超えて、HTTP Referer ヘッダを偽装可能な脆弱性が存在します。 CVE-2007-5960 29315 CVE-2007-5960 57985 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000995.html 2007-11-26 2008-03-05 View