CVE-2007-3656

N/A Unknown
Published: July 10, 2007 Modified: April 23, 2026
View on NVD

Description

Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt
Source: cve@mitre.org
ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc
Source: cve@mitre.org
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Source: cve@mitre.org
http://lcamtuf.coredump.cx/ffcache/
Source: cve@mitre.org
Exploit
http://osvdb.org/38028
Source: cve@mitre.org
http://secunia.com/advisories/25589
Source: cve@mitre.org
http://secunia.com/advisories/25990
Source: cve@mitre.org
http://secunia.com/advisories/26072
Source: cve@mitre.org
http://secunia.com/advisories/26103
Source: cve@mitre.org
http://secunia.com/advisories/26107
Source: cve@mitre.org
http://secunia.com/advisories/26149
Source: cve@mitre.org
http://secunia.com/advisories/26151
Source: cve@mitre.org
http://secunia.com/advisories/26159
Source: cve@mitre.org
http://secunia.com/advisories/26179
Source: cve@mitre.org
http://secunia.com/advisories/26204
Source: cve@mitre.org
http://secunia.com/advisories/26205
Source: cve@mitre.org
http://secunia.com/advisories/26211
Source: cve@mitre.org
http://secunia.com/advisories/26216
Source: cve@mitre.org
http://secunia.com/advisories/26258
Source: cve@mitre.org
http://secunia.com/advisories/26271
Source: cve@mitre.org
http://secunia.com/advisories/26460
Source: cve@mitre.org
http://secunia.com/advisories/28135
Source: cve@mitre.org
http://securityreason.com/securityalert/2872
Source: cve@mitre.org
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1
Source: cve@mitre.org
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
Source: cve@mitre.org
http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html
Source: cve@mitre.org
http://www.debian.org/security/2007/dsa-1337
Source: cve@mitre.org
http://www.debian.org/security/2007/dsa-1338
Source: cve@mitre.org
http://www.debian.org/security/2007/dsa-1339
Source: cve@mitre.org
http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml
Source: cve@mitre.org
http://www.mandriva.com/security/advisories?name=MDKSA-2007:152
Source: cve@mitre.org
http://www.mozilla.org/security/announce/2007/mfsa2007-24.html
Source: cve@mitre.org
http://www.novell.com/linux/security/advisories/2007_49_mozilla.html
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2007-0722.html
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2007-0724.html
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/473191/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/474226/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/474542/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/24831
Source: cve@mitre.org
http://www.securitytracker.com/id?1018411
Source: cve@mitre.org
http://www.ubuntu.com/usn/usn-490-1
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2007/4256
Source: cve@mitre.org
https://bugzilla.mozilla.org/show_bug.cgi?id=387333
Source: cve@mitre.org
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/35298
Source: cve@mitre.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9105
Source: cve@mitre.org
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt
Source: af854a3a-2127-422b-91ae-364da2661108
ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc
Source: af854a3a-2127-422b-91ae-364da2661108
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Source: af854a3a-2127-422b-91ae-364da2661108
http://lcamtuf.coredump.cx/ffcache/
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://osvdb.org/38028
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/25589
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/25990
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26072
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26103
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26107
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26149
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26151
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26159
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26179
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26204
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26205
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26211
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26216
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26258
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26271
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26460
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/28135
Source: af854a3a-2127-422b-91ae-364da2661108
http://securityreason.com/securityalert/2872
Source: af854a3a-2127-422b-91ae-364da2661108
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2007/dsa-1337
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2007/dsa-1338
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2007/dsa-1339
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mandriva.com/security/advisories?name=MDKSA-2007:152
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mozilla.org/security/announce/2007/mfsa2007-24.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.novell.com/linux/security/advisories/2007_49_mozilla.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2007-0722.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2007-0724.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/473191/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/474226/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/474542/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/24831
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1018411
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/usn-490-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2007/4256
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.mozilla.org/show_bug.cgi?id=387333
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/35298
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9105
Source: af854a3a-2127-422b-91ae-364da2661108

90 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
6.6%
91th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-200

Affected Vendors

mozilla

Related CVEs

CVE-2021-47981 5.4
CVE-2021-47980 7.1
CVE-2021-47979 8.8
CVE-2021-47978 6.2
CVE-2021-47977 7.5