CVE-2007-0981
Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 12.1%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 12.14% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- mozilla/firefox · mozilla/seamonkey
- Source
- cve@mitre.org
References
- ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc
- ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
- http://fedoranews.org/cms/node/2713
- http://fedoranews.org/cms/node/2728
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
- http://lcamtuf.dione.cc/ffhostname.htmlExploit
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
- http://rhn.redhat.com/errata/RHSA-2007-0077.htmlVendor Advisory
- http://secunia.com/advisories/24175Vendor Advisory
- http://secunia.com/advisories/24205Vendor Advisory
- http://secunia.com/advisories/24238Vendor Advisory
- http://secunia.com/advisories/24287Vendor Advisory
- http://secunia.com/advisories/24290Vendor Advisory
- http://secunia.com/advisories/24293Vendor Advisory
- http://secunia.com/advisories/24320Vendor Advisory
- http://secunia.com/advisories/24328Vendor Advisory
- http://secunia.com/advisories/24333Vendor Advisory
- http://secunia.com/advisories/24342Vendor Advisory
- http://secunia.com/advisories/24343Vendor Advisory
- http://secunia.com/advisories/24384Vendor Advisory
- http://secunia.com/advisories/24393Vendor Advisory
- http://secunia.com/advisories/24395Vendor Advisory
- http://secunia.com/advisories/24437Vendor Advisory
- http://secunia.com/advisories/24455Vendor Advisory
- http://secunia.com/advisories/24457Vendor Advisory
- http://secunia.com/advisories/24650Vendor Advisory
- http://secunia.com/advisories/25588
- http://security.gentoo.org/glsa/glsa-200703-04.xml
- http://securityreason.com/securityalert/2262
- http://securitytracker.com/id?1017654
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.