CVE-2007-1095 | BDVDB-2026-22485 Detail
Description#
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
- http://www.securityfocus.com/archive/1/482876/100/200/threaded
- http://securityreason.com/securityalert/2310
- http://lcamtuf.coredump.cx/ietrap/ff/
- http://www.vupen.com/english/advisories/2007/3587
- http://secunia.com/advisories/27414
- http://www.securityfocus.com/archive/1/482925/100/0/threaded
- https://issues.rpath.com/browse/RPL-1858
- http://www.securityfocus.com/archive/1/461023/100/0/threaded
- http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
- http://secunia.com/advisories/27360
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://secunia.com/advisories/27298
- http://secunia.com/advisories/27315
- http://securitytracker.com/id?1018837
Show all 40
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11665
- http://secunia.com/advisories/27327
- http://www.vupen.com/english/advisories/2007/3544
- http://secunia.com/advisories/27276
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32647
- https://usn.ubuntu.com/535-1/
- http://www.debian.org/security/2007/dsa-1401
- http://osvdb.org/33809
- http://www.debian.org/security/2007/dsa-1392
- http://www.redhat.com/support/errata/RHSA-2007-0980.html
- http://secunia.com/advisories/27383
- http://www.novell.com/linux/security/advisories/2007_57_mozilla.html
- http://secunia.com/advisories/27356
- http://www.redhat.com/support/errata/RHSA-2007-0981.html
- http://www.vupen.com/english/advisories/2008/0083
- http://www.mozilla.org/security/announce/2007/mfsa2007-30.html
- http://secunia.com/advisories/27387
- http://www.securityfocus.com/archive/1/461007/100/0/threaded
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html
- http://secunia.com/advisories/27403
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32649
- http://secunia.com/advisories/27336
- http://www.debian.org/security/2007/dsa-1396
- http://secunia.com/advisories/27425
- https://bugzilla.mozilla.org/show_bug.cgi?id=371360
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.