ByteOS Network

CVE Vulnerability Details :

CVE-2007-0994

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-06 Mar, 2007 | 00:00

Updated At-07 Aug, 2024 | 12:43

▼CVE Numbering Authority (CNA)

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.redhat.com/support/errata/RHSA-2007-0078.html	vendor-advisory x_refsource_REDHAT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/24395	third-party-advisory x_refsource_SECUNIA
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733	x_refsource_CONFIRM
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851	vendor-advisory x_refsource_SLACKWARE
http://secunia.com/advisories/24384	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/24457	third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1336	vendor-advisory x_refsource_DEBIAN
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742	vendor-advisory x_refsource_HP
http://secunia.com/advisories/24650	third-party-advisory x_refsource_SECUNIA
http://www.mozilla.org/security/announce/2007/mfsa2007-09.html	x_refsource_CONFIRM
http://secunia.com/advisories/25588	third-party-advisory x_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1103	x_refsource_CONFIRM
http://securitytracker.com/id?1017726	vdb-entry x_refsource_SECTRACK
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html	vendor-advisory x_refsource_SUSE
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html	vendor-advisory x_refsource_SUSE
http://www.vupen.com/english/advisories/2007/0823	vdb-entry x_refsource_VUPEN
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742	vendor-advisory x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2007-0097.html	vendor-advisory x_refsource_REDHAT
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc	vendor-advisory x_refsource_SGI
http://secunia.com/advisories/24455	third-party-advisory x_refsource_SECUNIA
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc	vendor-advisory x_refsource_SGI
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131	vendor-advisory x_refsource_SLACKWARE
http://www.securityfocus.com/bid/22826	vdb-entry x_refsource_BID

Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0078.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/24395

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733

Resource:

x_refsource_CONFIRM

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851

Resource:

vendor-advisory

x_refsource_SLACKWARE

Hyperlink: http://secunia.com/advisories/24384

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/24457

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.debian.org/security/2007/dsa-1336

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://secunia.com/advisories/24650

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.mozilla.org/security/announce/2007/mfsa2007-09.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/25588

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://issues.rpath.com/browse/RPL-1103

Resource:

x_refsource_CONFIRM

Hyperlink: http://securitytracker.com/id?1017726

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.novell.com/linux/security/advisories/2007_22_mozilla.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.vupen.com/english/advisories/2007/0823

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0097.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc

Resource:

vendor-advisory

x_refsource_SGI

Hyperlink: http://secunia.com/advisories/24455

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc

Resource:

vendor-advisory

x_refsource_SGI

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131

Resource:

vendor-advisory

x_refsource_SLACKWARE

Hyperlink: http://www.securityfocus.com/bid/22826

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.redhat.com/support/errata/RHSA-2007-0078.html	vendor-advisory x_refsource_REDHAT x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/24395	third-party-advisory x_refsource_SECUNIA x_transferred
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733	x_refsource_CONFIRM x_transferred
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851	vendor-advisory x_refsource_SLACKWARE x_transferred
http://secunia.com/advisories/24384	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/24457	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.debian.org/security/2007/dsa-1336	vendor-advisory x_refsource_DEBIAN x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/24650	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.mozilla.org/security/announce/2007/mfsa2007-09.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/25588	third-party-advisory x_refsource_SECUNIA x_transferred
https://issues.rpath.com/browse/RPL-1103	x_refsource_CONFIRM x_transferred
http://securitytracker.com/id?1017726	vdb-entry x_refsource_SECTRACK x_transferred
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.vupen.com/english/advisories/2007/0823	vdb-entry x_refsource_VUPEN x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742	vendor-advisory x_refsource_HP x_transferred
http://www.redhat.com/support/errata/RHSA-2007-0097.html	vendor-advisory x_refsource_REDHAT x_transferred
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc	vendor-advisory x_refsource_SGI x_transferred
http://secunia.com/advisories/24455	third-party-advisory x_refsource_SECUNIA x_transferred
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc	vendor-advisory x_refsource_SGI x_transferred
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131	vendor-advisory x_refsource_SLACKWARE x_transferred
http://www.securityfocus.com/bid/22826	vdb-entry x_refsource_BID x_transferred