CVE-2007-3089 - CVE Reference - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0) - NEW -

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

CVE Reference: CVE-2007-3089

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3089

Description: Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/34701 UBUNTU http://www.ubuntu.com/usn/usn-490-1 SUSE http://www.novell.com/linux/security/advisories/2007_49_mozilla.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 ST 1018412 SREASON http://securityreason.com/securityalert/2781 SGI SAID Secunia Advisory: SA26258 Secunia Advisory: SA26271 Secunia Advisory: SA26159 Secunia Advisory: SA26205 Secunia Advisory: SA26204 Secunia Advisory: SA26216 Secunia Advisory: SA26211 Secunia Advisory: SA26072 Secunia Advisory: SA26151 Secunia Advisory: SA26149 Secunia Advisory: SA26179 Secunia Advisory: SA25589 Secunia Advisory: SA26103 Secunia Advisory: SA26106 Secunia Advisory: SA26107 Secunia Advisory: SA26095 Secunia Advisory: SA26460 Secunia Advisory: SA28135 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0724.html http://www.redhat.com/support/errata/RHSA-2007-0722.html http://www.redhat.com/support/errata/RHSA-2007-0723.html MISC http://lcamtuf.coredump.cx/ifsnatch/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html DEBIAN http://www.debian.org/security/2007/dsa-1338 http://www.debian.org/security/2007/dsa-1339 http://www.debian.org/security/2007/dsa-1337 CONFIRM http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html http://www.mozilla.org/security/announce/2007/mfsa2007-20.html CERT-VN 143297 CERT http://www.us-cert.gov/cas/techalerts/TA07-199A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/474542/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/474226/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/470446/100/0/threaded BID 24286

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Build A Niche Store "q" Cross-Site Scripting

2.	Microsoft Windows XP I2O Utility Filter Driver Privilege Escalation

3.	Debian OpenSSL Predictable Random Number Generator and Update

4.	Citrix Access Gateway Unspecified Authentication Bypass

5.	ZyXEL ZyWALL 100 "Referer" Cross-Site Scripting Vulnerability

6.	cPanel Cross-Site Scripting and Request Forgery Vulnerabilities

7.	Novell Client Login Long Username/Contex t Buffer Overflow

8.	Battle.net Clan Script "showmember" SQL Injection Vulnerability

9.	IBM Lotus Quickr WYSIWYG Editors Unspecified Cross-Site Scripting

10.	Ubuntu update for openssl