CVE-2007-1084
CVE-2007-1084
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into saving a bookmarklet with a data: scheme, which is executed in the context of the last visited web page.
EPSS 1,5%
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
epiphany-browser Debian:12
- Versions du logiciel
- 43.1-1
- 44.0-1
- 44.1-1
- 44.2-1
- 44.3-1
- 44.5-1
- 44.5-2
- 44.6-1
- 44~rc-1
- 45.0-1
- 45.1-1
- 45.2-1
- 45~beta-1
- 46.0-1
- 46.0-2
- 46.1-1
- 46.2-1
- 46.3-1
- 46~alpha-1
- 46~beta-1
- 47.0-1
- 47.2-1
- 47~beta-1
- 47~rc-1
- 48.0-1
- 48.1-1
- 48.2-1
- 48.3-1
- 48.3-2
- 48.5-1
- 48.5-2
- 48.5-3
- 48~beta-1
- 48~rc-1
- 48~rc-2
- 49.0-1
- 49.1-1
- 49.2-1
- 49.2-2
- 49.2-3
- 50.3-1
- 50.3-2
- 50.4-1
- 50.4-2
- 51.0-1
- 51.1-1
- 51~rc-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
epiphany-browser Debian:13
- Versions du logiciel
- 48.3-2
- 48.5-0+deb13u1
- 48.5-1
- 48.5-2
- 48.5-3
- 49.0-1
- 49.1-1
- 49.2-1
- 49.2-2
- 49.2-3
- 50.3-1
- 50.3-2
- 50.4-1
- 50.4-2
- 51.0-1
- 51.1-1
- 51~rc-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
epiphany-browser Debian:14
- Versions du logiciel
- 48.3-2
- 48.5-1
- 48.5-2
- 48.5-3
- 49.0-1
- 49.1-1
- 49.2-1
- 49.2-2
- 49.2-3
- 50.3-1
- 50.3-2
- 50.4-1
- 50.4-2
- 51.0-1
- 51.1-1
- 51~rc-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
Sources originales
- http://www.securityfocus.com/archive/1/461021/100/0/threaded
- http://www.securityfocus.com/archive/1/460896/100/0/threaded
- http://osvdb.org/33803
- http://lcamtuf.coredump.cx/ffbook
- http://www.securityfocus.com/archive/1/460890/100/0/threaded
- http://securityreason.com/securityalert/2304
- http://www.securityfocus.com/archive/1/460885/100/0/threaded
- http://lcamtuf.coredump.cx/ffbook/
- http://www.heise-security.co.uk/news/85728
- https://bugzilla.mozilla.org/show_bug.cgi?id=371179
- http://www.securityfocus.com/bid/22666
- http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0490.html
- https://nvd.nist.gov/vuln/detail/CVE-2007-1084