CVE-2007-3656 in Firefoxinfo

Summary

Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

07/10/2007

Disclosure

07/10/2007

Entries

1: VDB-3173

CPE

ready

CVSS

6.5

EPSS

0.05432

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!