CVE-2007-1095 in Mozilla Firefoxinfo

Summary

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.

Reservation

02/26/2007

Disclosure

02/26/2007

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
3405Mozilla Firefox Javascript memory corruption119Proof-of-ConceptOfficial fixCVE-2007-1095
3404Mozilla Firefox memory corruption119Proof-of-ConceptOfficial fixCVE-2007-1095

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!