CVE-2007-3089: Medium severity Mozilla Firefox vulnerability
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker can exploit it remotely by causing a user to load crafted HTML that uses document.write to replace an IFRAME during loading or when the frame is about:blank. No authentication is required.
Who is exposed?
Users of Mozilla Firefox versions earlier than 2.0.0.5 are exposed when they visit attacker-controlled content. The issue can allow arbitrary HTML to be displayed or certain JavaScript to run, including code demonstrated to intercept keystroke values from window.event.
How can I determine whether a system is affected?
Check the installed Firefox version. Versions before 2.0.0.5 are affected according to the available information.