CVE - CVE-2007-3844

CVE-ID
CVE-2007-3844	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1018479 URL:http://securitytracker.com/id?1018479 MISC:1018480 URL:http://securitytracker.com/id?1018480 MISC:1018481 URL:http://securitytracker.com/id?1018481 MISC:103177 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1~~ (Obsolete source) MISC:20070801 FLEA-2007-0039-1 firefox URL:http://www.securityfocus.com/archive/1/475265/100/200/threaded MISC:20070803 FLEA-2007-0040-1 thunderbird URL:http://www.securityfocus.com/archive/1/475450/30/5550/threaded MISC:201516 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1~~ (Obsolete source) MISC:25142 URL:http://www.securityfocus.com/bid/25142 MISC:26234 URL:http://secunia.com/advisories/26234 MISC:26258 URL:http://secunia.com/advisories/26258 MISC:26288 URL:http://secunia.com/advisories/26288 MISC:26303 URL:http://secunia.com/advisories/26303 MISC:26309 URL:http://secunia.com/advisories/26309 MISC:26331 URL:http://secunia.com/advisories/26331 MISC:26335 URL:http://secunia.com/advisories/26335 MISC:26393 URL:http://secunia.com/advisories/26393 MISC:26460 URL:http://secunia.com/advisories/26460 MISC:26572 URL:http://secunia.com/advisories/26572 MISC:27276 URL:http://secunia.com/advisories/27276 MISC:27298 URL:http://secunia.com/advisories/27298 MISC:27325 URL:http://secunia.com/advisories/27325 MISC:27326 URL:http://secunia.com/advisories/27326 MISC:27327 URL:http://secunia.com/advisories/27327 MISC:27356 URL:http://secunia.com/advisories/27356 MISC:27414 URL:http://secunia.com/advisories/27414 MISC:27680 URL:http://secunia.com/advisories/27680 MISC:28135 URL:http://secunia.com/advisories/28135 MISC:28363 URL:http://secunia.com/advisories/28363 MISC:ADV-2007-3587 URL:~~http://www.vupen.com/english/advisories/2007/3587~~ (Obsolete source) MISC:ADV-2007-4256 URL:~~http://www.vupen.com/english/advisories/2007/4256~~ (Obsolete source) MISC:ADV-2008-0082 URL:~~http://www.vupen.com/english/advisories/2008/0082~~ (Obsolete source) MISC:DSA-1344 URL:http://www.debian.org/security/2007/dsa-1344 MISC:DSA-1345 URL:http://www.debian.org/security/2007/dsa-1345 MISC:DSA-1346 URL:http://www.debian.org/security/2007/dsa-1346 MISC:DSA-1391 URL:http://www.debian.org/security/2007/dsa-1391 MISC:FEDORA-2007-2601 URL:https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html MISC:FEDORA-2007-3431 URL:https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html MISC:GLSA-200708-09 URL:http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml MISC:HPSBUX02153 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 MISC:HPSBUX02156 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 MISC:MDKSA-2007:152 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2007:152~~ (Obsolete source) MISC:MDVSA-2007:047 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2007:047~~ (Obsolete source) MISC:MDVSA-2008:047 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2008:047~~ (Obsolete source) MISC:RHSA-2007:0979 URL:http://www.redhat.com/support/errata/RHSA-2007-0979.html MISC:RHSA-2007:0980 URL:http://www.redhat.com/support/errata/RHSA-2007-0980.html MISC:RHSA-2007:0981 URL:http://www.redhat.com/support/errata/RHSA-2007-0981.html MISC:SSA:2007-213-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.010101 MISC:SSRT061181 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 MISC:SSRT061236 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 MISC:SUSE-SA:2007:057 URL:http://www.novell.com/linux/security/advisories/2007_57_mozilla.html MISC:USN-493-1 URL:http://www.ubuntu.com/usn/usn-493-1 MISC:USN-503-1 URL:http://www.ubuntu.com/usn/usn-503-1 MISC:http://bugzilla.mozilla.org/show_bug.cgi?id=388121 URL:http://bugzilla.mozilla.org/show_bug.cgi?id=388121 MISC:http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html URL:http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html MISC:http://www.mozilla.org/security/announce/2007/mfsa2007-26.html URL:http://www.mozilla.org/security/announce/2007/mfsa2007-26.html MISC:https://issues.rpath.com/browse/RPL-1600 URL:https://issues.rpath.com/browse/RPL-1600 MISC:oval:org.mitre.oval:def:9493 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9493
Assigning CNA
Red Hat, Inc.
Date Record Created
20070718	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070718)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)