PT-2007-2245 · Mozilla+1 · Firefox+1

Michal Zalewski · Publicado 2007-02-07 · Atualizado 2024-12-12 · CVE-2007-0800

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 1.5.0.9

Description A cross-zone issue allows remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup, considering blocked popups to have an internal zone origin.

Recommendations For Mozilla Firefox version 1.5.0.9, update to a newer version to mitigate the risk.

Exploit

Correção

Identificadores relacionados

CVE-2007-0800

HPSBUX02153

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2007:0077

RHSA-2007:0078

RHSA-2007:0079

RHSA-2007:0097

RHSA-2007:0108

RHSA-2007_0077

RHSA-2007_0078

RHSA-2007_0079

RHSA-2007_0097

RHSA-2007_0108

Produtos afetados

Firefox

Red Hat

Referências · 2068

• 🔥 http://securityfocus.com/bid/22396 · Exploit
• https://suse.com/security/cve/CVE-2009-0354 · Nota
• https://suse.com/security/cve/CVE-2024-3302 · Nota
• https://suse.com/security/cve/CVE-2024-1551 · Nota
• https://suse.com/security/cve/CVE-2023-25731 · Nota
• https://suse.com/security/cve/CVE-2009-1307 · Nota
• https://suse.com/security/cve/CVE-2020-6812 · Nota
• https://suse.com/security/cve/CVE-2024-4769 · Nota
• https://suse.com/security/cve/CVE-2016-5282 · Nota
• https://suse.com/security/cve/CVE-2010-1210 · Nota
• https://access.redhat.com/errata/RHSA-2007:0078 · Nota
• https://suse.com/security/cve/CVE-2023-23601 · Nota
• https://suse.com/security/cve/CVE-2013-0795 · Nota
• https://suse.com/security/cve/CVE-2013-1720 · Nota
• https://suse.com/security/cve/CVE-2011-3650 · Nota