CVE-2007-3511: Medium severity Mozilla SeaMonkey vulnerability
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3511?
CVE-2007-3511 is considered to have moderate severity as it allows remote attackers to manipulate focus behavior.
Which versions of Firefox are affected by CVE-2007-3511?
CVE-2007-3511 affects Mozilla Firefox versions before 2.0.0.8, including 1.5.0.12 and 2.0.0.4.
How do I fix CVE-2007-3511?
The fix for CVE-2007-3511 is to upgrade to Mozilla Firefox version 2.0.0.8 or later, or update SeaMonkey to version 1.1.5 or later.
How does CVE-2007-3511 impact user security?
CVE-2007-3511 can lead to unauthorized interception of keystrokes, potentially allowing attackers to gain sensitive information.
Is SeaMonkey also affected by CVE-2007-3511?
Yes, CVE-2007-3511 affects various versions of SeaMonkey prior to 1.1.5, similar to the affected versions in Firefox.