PT-2007-2245 · Mozilla+1 · Firefox+1

Michal Zalewski · Published 2007-02-07 · Updated 2024-12-12 · CVE-2007-0800

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 1.5.0.9

Description A cross-zone issue allows remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup, considering blocked popups to have an internal zone origin.

Recommendations For Mozilla Firefox version 1.5.0.9, update to a newer version to mitigate the risk.

Exploit

Fix

Related Identifiers

CVE-2007-0800

HPSBUX02153

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2007:0077

RHSA-2007:0078

RHSA-2007:0079

RHSA-2007:0097

RHSA-2007:0108

RHSA-2007_0077

RHSA-2007_0078

RHSA-2007_0079

RHSA-2007_0097

RHSA-2007_0108

Affected Products

Firefox

Red Hat

References · 2068

• 🔥 http://securityfocus.com/bid/22396 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2777 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5947 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2775 · Security Note
• https://bdu.fstec.ru/vul/2016-02223 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1727 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3801 · Security Note
• https://bdu.fstec.ru/vul/2015-01376 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2780 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1726 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6502 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5337 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5340 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1562 · Security Note