CVE-2007-1095 in Mozilla Firefox

Résumé (Anglaise)

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.

Réserver

26/02/2007

Divulgation

26/02/2007

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
3405	Mozilla Firefox Javascript buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2007-1095
3404	Mozilla Firefox buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2007-1095