CVE-2007-5960

Published: Nov 26, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.

Affected (52)

Products: Mozilla: Firefox, Seamonkey

Mozilla

2 products

Firefox

Seamonkey

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.8
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 2.0 beta1
Mozilla Firefox	Version 2.0 rc2
Mozilla Firefox	Version 2.0 rc3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Seamonkey	Up to 1.1.7

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (114)

http://browser.netscape.com/releasenotes/

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=198965

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=200909

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00004.html

Source: secalert@redhat.com

http://secunia.com/advisories/27725

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27793

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27796

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27797

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27800

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27816

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27838

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27845

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27855

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27944

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27955

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27957

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27979

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28001

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28016

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28171

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28277

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28398

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29164

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200712-21.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1018995

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.365006

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374833

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2008-0093

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0260

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1424

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1425

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:246

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2007/mfsa2007-39.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-1082.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1083.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1084.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/488002/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/488971/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26589

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-546-2

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/4002

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/4018

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0083

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0643

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/38644

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1984

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1995

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9794

Source: secalert@redhat.com

https://usn.ubuntu.com/546-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00115.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00135.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00168.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg01011.html

Source: secalert@redhat.com

http://browser.netscape.com/releasenotes/