CVE-2007-3089

Published: Jun 6, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

Affected (41)

Products: Mozilla: Firefox

Mozilla

1 product

Firefox

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 2.0.0.4
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0

References (108)

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: cve@mitre.org

http://lcamtuf.coredump.cx/ifsnatch/

Source: cve@mitre.org

http://osvdb.org/38024

Source: cve@mitre.org

http://secunia.com/advisories/25589

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26072

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26095

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26103

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26106

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26107

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26149

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26151

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26159

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26179

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26204

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26205

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26211

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26216

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26258

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26271

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26460

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28135

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2781

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1

Source: cve@mitre.org

http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1337

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1338

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1339

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/143297

Source: cve@mitre.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:152

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2007/mfsa2007-20.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_49_mozilla.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0722.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0723.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0724.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/470446/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474226/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474542/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24286

Source: cve@mitre.org

http://www.securitytracker.com/id?1018412

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-490-1

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-199A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/2564

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4256

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=381300

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=381300

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=382686

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=382686

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34701

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11122

Source: cve@mitre.org

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt (unsafe URL)