Home Corporate Website Jobs Mailing Lists RSS Blog Advertise
	Software Inspectors   Scan Online   Personal (PSI)   Network (NSI 2.0) Solutions For   Security Professionals   Security Vendors Free Solutions For   Open Communities   Journalists & Media Secunia Advisories   Search   Historic Advisories   Listed By Product   Listed By Vendor   Statistics / Graphs   Secunia Research   Report Vulnerability   About Advisories Virus Information   Chronological List   Last 10 Virus Alerts   About Virus Information Secunia Customers   Customer Area CVE Reference: CVE-2007-3656 NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. Original Page at CVE MITRE: CVE-2007-3656 Description: Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs. CVE Status: Candidate References: XF   http://xforce.iss.net/xforce/xfdb/35298 UBUNTU   http://www.ubuntu.com/usn/usn-490-1 SUSE   http://www.novell.com/linux/security/advisories/2007_49_mozilla.html SUNALERT   http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1   http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 ST   1018411 SREASON   http://securityreason.com/securityalert/2872 SGI SAID   Secunia Advisory: SA26460   Secunia Advisory: SA26258   Secunia Advisory: SA26271   Secunia Advisory: SA26159   Secunia Advisory: SA26205   Secunia Advisory: SA26204   Secunia Advisory: SA26216   Secunia Advisory: SA26211   Secunia Advisory: SA26072   Secunia Advisory: SA26151   Secunia Advisory: SA26149   Secunia Advisory: SA26179   Secunia Advisory: SA25589   Secunia Advisory: SA26107   Secunia Advisory: SA26103   Secunia Advisory: SA25990   Secunia Advisory: SA28135 REDHAT   http://www.redhat.com/support/errata/RHSA-2007-0724.html   http://www.redhat.com/support/errata/RHSA-2007-0722.html MISC   http://lcamtuf.coredump.cx/ffcache/ MANDRIVA   http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 HP   http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 GENTOO   http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml DEBIAN   http://www.debian.org/security/2007/dsa-1339   http://www.debian.org/security/2007/dsa-1338   http://www.debian.org/security/2007/dsa-1337 CONFIRM   http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html   http://www.mozilla.org/security/announce/2007/mfsa2007-24.html BUGTRAQ   http://www.securityfocus.com/archive/1/archive/1/474542/100/0/threaded   http://www.securityfocus.com/archive/1/archive/1/474226/100/0/threaded   http://www.securityfocus.com/archive/1/archive/1/473191/100/0/threaded BID   24831 Return to the previous page. Secunia PSI Scan | Patch | Track Free Download Secunia Poll Do you think it's important to read Setup/User Guides for applications for use within your network? Yes, I do it all the time Yes, but I do it rarely No See Results    Most Popular Advisories 1. Kostenloses Linkmanagements cript Multiple Vulnerabilities 2. Linux Kernel Multiple Vulnerabilities 3. Model Search "cat" SQL Injection Vulnerability 4. Drupal Site Documentation Module Information Disclosure 5. Symantec Altiris Deployment Solution Multiple Vulnerabilities 6. 68 Classifieds "cat" SQL Injection Vulnerability 7. Oracle Application Server Portal Authentication Bypass 8. Blender Multiple Temporary File Security Issues 9. Microsoft Windows WMF "SETABORTPROC" Arbitrary Code Execution 10. Interspire ActiveKB Admin Interface Cookie Security Bypass
Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia