CVE-2007-3656

Published: Jul 10, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.

Affected (31)

Products: Mozilla: Firefox

Mozilla

1 product

Firefox

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.8

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (90)

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: cve@mitre.org

http://lcamtuf.coredump.cx/ffcache/

Source: cve@mitre.org

Exploit

http://osvdb.org/38028

Source: cve@mitre.org

http://secunia.com/advisories/25589

Source: cve@mitre.org

http://secunia.com/advisories/25990

Source: cve@mitre.org

http://secunia.com/advisories/26072

Source: cve@mitre.org

http://secunia.com/advisories/26103

Source: cve@mitre.org

http://secunia.com/advisories/26107

Source: cve@mitre.org

http://secunia.com/advisories/26149

Source: cve@mitre.org

http://secunia.com/advisories/26151

Source: cve@mitre.org

http://secunia.com/advisories/26159

Source: cve@mitre.org

http://secunia.com/advisories/26179

Source: cve@mitre.org

http://secunia.com/advisories/26204

Source: cve@mitre.org

http://secunia.com/advisories/26205

Source: cve@mitre.org

http://secunia.com/advisories/26211

Source: cve@mitre.org

http://secunia.com/advisories/26216

Source: cve@mitre.org

http://secunia.com/advisories/26258

Source: cve@mitre.org

http://secunia.com/advisories/26271

Source: cve@mitre.org

http://secunia.com/advisories/26460

Source: cve@mitre.org

http://secunia.com/advisories/28135

Source: cve@mitre.org

http://securityreason.com/securityalert/2872

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1

Source: cve@mitre.org

http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1337

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1338

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1339

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:152

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2007/mfsa2007-24.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_49_mozilla.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0722.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0724.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/473191/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474226/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474542/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24831

Source: cve@mitre.org

http://www.securitytracker.com/id?1018411

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-490-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4256

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=387333

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/35298

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9105

Source: cve@mitre.org

ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt (unsafe URL)