CVE-2007-0994: Code Injection
First published: Tue Mar 06 2007(Updated: )
A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | >=1.5<1.5.0.10 | |
| Mozilla Firefox | >=2.0<2.0.0.2 | |
| Mozilla SeaMonkey | >=1.1<1.1.1 | |
| Mozilla SeaMonkey | >=1.0<1.0.8 | |
| Debian Debian Linux | =3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.redhat.com/support/errata/RHSA-2007-0078.html
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733
- https://issues.rpath.com/browse/RPL-1103
- http://www.mozilla.org/security/announce/2007/mfsa2007-09.html
- http://www.redhat.com/support/errata/RHSA-2007-0097.html
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
- http://www.securityfocus.com/bid/22826
- http://securitytracker.com/id?1017726
- http://secunia.com/advisories/24395
- http://secunia.com/advisories/24384
- http://secunia.com/advisories/24650
- http://www.debian.org/security/2007/dsa-1336
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
- http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
- http://secunia.com/advisories/24455
- http://secunia.com/advisories/24457
- http://secunia.com/advisories/25588
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://www.vupen.com/english/advisories/2007/0823
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/remedy
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/mozilla
- canonical/mozilla firefox
- version/mozilla firefox/1.5
- version/mozilla firefox/2.0
- canonical/mozilla seamonkey
- version/mozilla seamonkey/1.1
- version/mozilla seamonkey/1.0
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/3.1