Логотип exploitDog
bind:CVE-2007-3089
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2007-3089

Количество 6

Количество 6

ubuntu логотип

CVE-2007-3089

около 18 лет назад

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

CVSS2: 4.3
EPSS: Средний
redhat логотип

CVE-2007-3089

около 18 лет назад

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

EPSS: Средний
nvd логотип

CVE-2007-3089

около 18 лет назад

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

CVSS2: 4.3
EPSS: Средний
debian логотип

CVE-2007-3089

около 18 лет назад

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write ...

CVSS2: 4.3
EPSS: Средний
github логотип

GHSA-w739-3fq5-fgvp

около 3 лет назад

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

EPSS: Средний
oracle-oval логотип

ELSA-2007-0724

почти 18 лет назад

ELSA-2007-0724: Critical: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2007-3089

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

CVSS2: 4.3
20%
Средний
около 18 лет назад
redhat логотип
CVE-2007-3089

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

20%
Средний
около 18 лет назад
nvd логотип
CVE-2007-3089

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

CVSS2: 4.3
20%
Средний
около 18 лет назад
debian логотип
CVE-2007-3089

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write ...

CVSS2: 4.3
20%
Средний
около 18 лет назад
github логотип
GHSA-w739-3fq5-fgvp

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

20%
Средний
около 3 лет назад
oracle-oval логотип
ELSA-2007-0724

ELSA-2007-0724: Critical: firefox security update (CRITICAL)

почти 18 лет назад

Уязвимостей на страницу