Home > Vulnerability Database > CVE-2007-1095

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2007-1095

Date: February 26, 2007

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.

Severity Score

5.6

Related Resources (60)

Url: http://secunia.com/advisories/27480

Url: http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202

Url: http://www.securityfocus.com/archive/1/461007/100/0/threaded

Url: http://secunia.com/advisories/27680

Url: http://secunia.com/advisories/27360

Url: http://www.debian.org/security/2007/dsa-1401

Url: http://www.securityfocus.com/archive/1/482932/100/200/threaded

Url: http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html

Url: http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.html

Url: http://secunia.com/advisories/27356

Url: http://secunia.com/advisories/27311

Url: http://www.novell.com/linux/security/advisories/2007_57_mozilla.html

Url: http://lcamtuf.coredump.cx/ietrap/ff/

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11665

Url: http://secunia.com/advisories/27276

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-1095

Url: http://secunia.com/advisories/27315

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1

Url: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Url: https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html

Url: https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html

Url: http://www.securityfocus.com/archive/1/461023/100/0/threaded

Url: http://www.securityfocus.com/archive/1/482925/100/0/threaded

Url: http://secunia.com/advisories/27327

Url: http://secunia.com/advisories/27403

Url: http://secunia.com/advisories/27325

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=371360

Url: http://securitytracker.com/id?1018837

Url: https://usn.ubuntu.com/535-1/

Url: http://osvdb.org/33809

Url: http://secunia.com/advisories/27383

Url: http://www.vupen.com/english/advisories/2007/3544

Url: http://www.vupen.com/english/advisories/2007/3587

Url: https://access.redhat.com/security/cve/CVE-2007-1095

Url: http://www.vupen.com/english/advisories/2008/0083

Url: https://issues.rpath.com/browse/RPL-1858

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/32647

Url: http://securityreason.com/securityalert/2310

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/32649

Url: http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml

Url: http://www.redhat.com/support/errata/RHSA-2007-0981.html

Url: http://secunia.com/advisories/27298

Url: http://secunia.com/advisories/27414

Url: http://secunia.com/advisories/27336

Url: http://www.redhat.com/support/errata/RHSA-2007-0979.html

Url: http://secunia.com/advisories/27335

Url: http://www.securityfocus.com/archive/1/482876/100/200/threaded

Url: https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html

Url: http://www.securityfocus.com/bid/22688

Url: http://www.redhat.com/support/errata/RHSA-2007-0980.html

Url: http://www.debian.org/security/2007/dsa-1396

Url: http://www.ubuntu.com/usn/usn-536-1

Url: http://www.debian.org/security/2007/dsa-1392

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2007-1095

Url: http://www.mozilla.org/security/announce/2007/mfsa2007-30.html

Url: http://secunia.com/advisories/27387

Url: http://secunia.com/advisories/28398

Url: http://secunia.com/advisories/27425

Url: http://secunia.com/advisories/27665

Url: https://www.mend.io/vulnerability-database/CVE-2007-1095

Severity Score

5.6

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us