CVE-2007-2060

Published: Apr 18, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.

Affected (1)

Products: Wizz Computers: Wizz Rss Reader

Wizz Computers

1 product

Wizz Rss Reader

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wizz Computers Wizz Rss Reader	version ≤ 2.1.8

References (18)

http://osvdb.org/34534

Source: cve@mitre.org

http://secunia.com/advisories/24913

Source: cve@mitre.org

http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/319464

Source: cve@mitre.org

PatchUS Government Resource

http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T

Source: cve@mitre.org

http://www.securityfocus.com/bid/23523

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1425

Source: cve@mitre.org

https://addons.mozilla.org/en-US/firefox/addon/424

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33693

Source: cve@mitre.org

http://osvdb.org/34534