CVE-2007-0981 | BDVDB-2026-22329 Detail
Description#
Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.redhat.com/support/errata/RHSA-2007-0078.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=370445
- http://secunia.com/advisories/24395
- http://www.osvdb.org/32104
- http://www.securityfocus.com/archive/1/461336/100/0/threaded
- http://secunia.com/advisories/24328
- http://www.redhat.com/support/errata/RHSA-2007-0108.html
- http://security.gentoo.org/glsa/glsa-200703-04.xml
- http://www.securityfocus.com/archive/1/460126/100/200/threaded
- http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml
- http://www.securityfocus.com/archive/1/460217/100/0/threaded
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
- http://secunia.com/advisories/24384
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32533
- http://secunia.com/advisories/24457
Show all 40
- http://secunia.com/advisories/24343
- http://www.debian.org/security/2007/dsa-1336
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9730
- http://www.vupen.com/english/advisories/2007/0718
- http://www.kb.cert.org/vuls/id/885753
- http://secunia.com/advisories/24650
- http://www.ubuntu.com/usn/usn-428-1
- http://securityreason.com/securityalert/2262
- http://secunia.com/advisories/24320
- http://secunia.com/advisories/25588
- https://issues.rpath.com/browse/RPL-1103
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
- http://www.vupen.com/english/advisories/2008/0083
- http://www.securityfocus.com/archive/1/461809/100/0/threaded
- http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
- http://secunia.com/advisories/24293
- http://secunia.com/advisories/24238
- http://secunia.com/advisories/24393
- http://secunia.com/advisories/24342
- http://secunia.com/advisories/24287
- http://fedoranews.org/cms/node/2713
- http://secunia.com/advisories/24175
- http://www.securityfocus.com/bid/22566
- http://www.redhat.com/support/errata/RHSA-2007-0097.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.