CVE-2007-1256

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-03-03 20:19

Updated : 2024-02-04 17:13


NVD link : CVE-2007-1256

Mitre link : CVE-2007-1256

CVE.ORG link : CVE-2007-1256


JSON object : View

Products Affected

mozilla

  • firefox
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer