CVE-2007-3844

CVSS v2.0 4.3 (Medium)

EPSS 95.25 % (99^th)

Affected Products 3

Advisories 8

Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.

Weaknesses

CWE-NVD-Other

Related CVEs

CVE-2007-3089

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2007-08-08 01:17:00
(17 years ago)
Updated Date: 2018-10-15 21:31:18
(6 years ago)

Affected Products

Mozilla

Firefox
Seamonkey
Thunderbird

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox 2.0.0.5	cpe:2.3:a:mozilla:firefox:2.0.0.5
	Mozilla Seamonkey 1.1.3	cpe:2.3:a:mozilla:seamonkey:1.1.3
	Mozilla Thunderbird 2.0.0.5	cpe:2.3:a:mozilla:thunderbird:2.0.0.5