PT-2007-4381 · Mozilla+2 · Firefox+2

Published 2007-06-06 · Updated 2024-12-12 · CVE-2007-3089

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 2.0.0.5

Description: The issue allows remote attackers to display arbitrary HTML or execute certain JavaScript code by using document.write to replace an IFRAME during the load stage or in the case of an about:blank frame. This can be demonstrated by code that intercepts keystroke values from window.event.

Recommendations: For versions prior to 2.0.0.5, update to version 2.0.0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the document.write function to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-3089

DSA-1337-1

DSA-1338-1

DSA-1339-1

DTSA-45-1

DTSA-47-1

DTSA-51-1

HPSBUX02153

OPENSUSE-SU-2014_1100-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:10601-1

OPENSUSE-SU-2024:14572-1

RHSA-2007:0722

RHSA-2007:0723

RHSA-2007:0724

RHSA-2007_0722

RHSA-2007_0723

RHSA-2007_0724

Affected Products

Firefox

Red Hat

Suse

References · 3140

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_onreadystatechange.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_attribchildremoved.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_webidl_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_tostring_console_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proto_crmfrequest.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_reduceright.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_interleaved_write.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_nssvgvalue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb · Exploit
• 🔥 https://github.com/vlad902/annotated-fbi-tbb-exploit · Exploit
• 🔥 https://github.com/argp/cve-2011-3026-firefox · Exploit
• 🔥 https://github.com/mk219533/CVE-2010-1205 · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• https://bdu.fstec.ru/vul/2014-00278 · Security Note