CVE-2007-3827 in Mozilla Firefox
Summary
Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
07/17/2007
Disclosure
07/17/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 37861 | Mozilla Firefox document.cookie information disclosure | Not defined | Not defined | CVE-2007-3827 |