CVE-2007-1736: High severity Mozilla Firefox vulnerability
Published Mar 28, 2007
·Updated
Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection.
Affected Software
1 affected component
Mozilla Firefox=2.0.0.3
Event History
Mar 28, 2007
CVE Published
10:19 PM
Mar 29, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1736?
CVE-2007-1736 has a moderate severity level as it allows phishing protection to be bypassed.
2
How do I fix CVE-2007-1736?
To fix CVE-2007-1736, upgrade to a later version of Mozilla Firefox that addresses this vulnerability.
3
What does CVE-2007-1736 affect?
CVE-2007-1736 affects Mozilla Firefox version 2.0.0.3.
4
What vulnerability does CVE-2007-1736 exploit?
CVE-2007-1736 exploits the failure to check URLs in object or iframe HTML tags against the phishing site blacklist.
5
Can CVE-2007-1736 lead to any attacks?
Yes, CVE-2007-1736 can lead to successful phishing attacks by allowing malicious URLs to bypass Firefox's phishing protection.