CVE-2007-3089

CVE Details

Release Date:

2007-06-06

Description

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the promiscuous IFRAME access bug, a related issue to CVE-2006-4568. Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka Cross Context Scripting. NOTE: this issue is caused by a CVE-2007-3089 regression.

See more information about CVE-2007-3089 from MITRE CVE dictionary and NIST NVD

CVSS v2.0 metrics

NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.

Base Score:	4.3	Base Metrics:	AV:N/AC:M/Au:N/C:N/I:P/A:N
Access Vector:	Network	Attack Complexity:	Medium
Authentication:	None required	Confidentiality Impact:	None
Integrity Impact:	Partial	Availability Impact:	None

Errata information

Platform	Errata	Release Date
Oracle Enterprise Linux version 3 (seamonkey)	ELSA-2007-0722	2007-07-19
Oracle Enterprise Linux version 4 (firefox)	ELSA-2007-0724	2007-07-19
Oracle Enterprise Linux version 4 (seamonkey)	ELSA-2007-0722	2007-07-19
Oracle Enterprise Linux version 4 (thunderbird)	ELSA-2007-0723	2007-07-19
Oracle Linux version 5 (firefox)	ELSA-2007-0724	2007-07-19

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team