First published: Fri Jun 01 2007(Updated: )
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site, which is executed in the context of that site.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | =1.5.0.6 | |
Mozilla SeaMonkey | =1.0.9 | |
Mozilla Firefox | =2.0.0.2 | |
Mozilla Firefox | =1.5.0.10 | |
Mozilla Firefox | =1.5.0.3 | |
Mozilla Firefox | =1.5.0.11 | |
Mozilla Firefox | =1.5 | |
Mozilla SeaMonkey | =1.1.2 | |
Mozilla Firefox | =1.5.0.7 | |
Mozilla Firefox | =2.0 | |
Mozilla Firefox | =1.5.0.8 | |
Mozilla Firefox | =2.0.0.3 | |
Mozilla Firefox | =1.5.0.9 | |
Mozilla Firefox | =1.5.0.5 | |
Mozilla Firefox | =1.5.0.2 | |
Mozilla Firefox | =2.0.0.1 | |
Mozilla Firefox | =1.5.0.4 | |
Mozilla Firefox | =1.5.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.