CVE-2007-1095

Published: Feb 26, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.

Affected (75)

Products: Mozilla: Firefox, Seamonkey

Mozilla

2 products

Firefox

Seamonkey

Configuration A

60 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.7
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.1
Mozilla Firefox	Version 0.2
Mozilla Firefox	Version 0.3
Mozilla Firefox	Version 0.4
Mozilla Firefox	Version 0.5
Mozilla Firefox	Version 0.6.1
Mozilla Firefox	Version 0.6
Mozilla Firefox	Version 0.7.1
Mozilla Firefox	Version 0.7
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.0 preview_release
Mozilla Firefox	Version 1.4.1
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version 1.8
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0

Configuration B

15 vulnerable

Vulnerable Software	Affected Versions
Mozilla Seamonkey	Up to 1.1.4
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1

References (112)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: cve@mitre.org

http://lcamtuf.coredump.cx/ietrap/ff/

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.html

Source: cve@mitre.org

http://osvdb.org/33809

Source: cve@mitre.org

http://secunia.com/advisories/27276

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27298

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27311

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27315

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27325

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27327

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27335

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27336

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27356

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27360

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27383

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27387

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27403

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27414

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27425

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27480

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27665

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27680

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28398

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2310

Source: cve@mitre.org

http://securitytracker.com/id?1018837

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1

Source: cve@mitre.org

http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1392

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1396

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1401

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml

Source: cve@mitre.org

http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2007/mfsa2007-30.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_57_mozilla.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0979.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0980.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0981.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/461007/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/461023/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/482876/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/482925/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/482932/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22688

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-536-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3544

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3587

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0083

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=371360

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32647

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32649

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1858

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11665

Source: cve@mitre.org

https://usn.ubuntu.com/535-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742