CVE-2007-3511
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other...
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.
Exploit likelihood
What each source reports
NVD Score used
4.3
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.
- Record
CVE-2007-3511- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.
- Record
CVE-2007-3511- Updated
- 2026-11-02
EUVDEUVD-2007-3495 No score
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.
- Record
EUVD-2007-3495- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vqj2-jf89-h87v No score
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other...
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.
- Record
GHSA-vqj2-jf89-h87v- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 From an advisory covering 9 CVEs |
before 1.8.0.14~pre071019b-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 4 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny1 |
1.8.0.14~pre071019b-0etch1 |
iceweaselDebian:4.0 From an advisory covering 9 CVEs |
before 2.0.0.6+2.0.0.8-0etch1, plus listed versions 2.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch1 Show 6 moreShow less2.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-1 |
2.0.0.6+2.0.0.8-0etch1 |
iceapeDebian:4.0 From an advisory covering 9 CVEs |
before 1.0.11~pre071022-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.8-41.0.9-0etch1 |
1.0.11~pre071022-0etch1 |
xulrunnerDebian:5.0 From an advisory covering 9 CVEs |
before 1.8.0.14~pre071019b-0lenny1 | 1.8.0.14~pre071019b-0lenny1 |
iceapeDebian:5.0 From an advisory covering 9 CVEs |
before 1.0.11~pre071022-0etch1+lenny1 | 1.0.11~pre071022-0etch1+lenny1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
Show 129 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-5.el5 | 0:1.5.0.12-5.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-5.el5 | 0:1.5.0.12-5.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3511 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published July 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.36%, the 83rd percentile. No source names a fixed version.
References
securityfocus.com/bid/24725
redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
securityfocus.com/archive/1/482876/100/200/threaded
vupen.com/english/advisories/2007/3587
secunia.com/advisories/27414
securityfocus.com/archive/1/482925/100/0/threaded
Show 91 moreShow less
issues.rpath.com/browse/RPL-1858
exchange.xforce.ibmcloud.com/vulnerabilities/35299
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
secunia.com/advisories/27298
securitytracker.com/id?1018837
secunia.com/advisories/27327
vupen.com/english/advisories/2007/3544
secunia.com/advisories/27276
usn.ubuntu.com/535-1
debian.org/security/2007/dsa-1401
debian.org/security/2007/dsa-1392
redhat.com/support/errata/RHSA-2007-0980.html
secunia.com/advisories/27383
novell.com/linux/security/advisories/2007_57_mozilla.html
secunia.com/advisories/27356
redhat.com/support/errata/RHSA-2007-0981.html
osvdb.org/37994
vupen.com/english/advisories/2008/0083
secunia.com/advisories/27387
sla.ckers.org/forum/read.php?3%2C13142
redhat.com/archives/fedora-package-announce/2007-November/msg00498.html
secunia.com/advisories/27403
secunia.com/advisories/27336
debian.org/security/2007/dsa-1396
secunia.com/advisories/27425
archives.neohapsis.com/archives/fulldisclosure/2007-06/0646.html
mozilla.org/security/announce/2007/mfsa2007-32.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9763
secunia.com/advisories/27325
mandriva.com/en/security/advisories?name=MDKSA-2007:202
redhat.com/support/errata/RHSA-2007-0979.html
secunia.com/advisories/27335
secunia.com/advisories/25904
redhat.com/archives/fedora-package-announce/2007-October/msg00355.html
secunia.com/advisories/27480
yathong.googlepages.com/FirefoxFocusBug.html
secunia.com/advisories/27680
archives.neohapsis.com/archives/fulldisclosure/2007-06/0658.html
support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
securityfocus.com/archive/1/482932/100/200/threaded
ubuntu.com/usn/usn-536-1
nvd.nist.gov/vuln/detail/CVE-2007-3511
sla.ckers.org/forum/read.php?3,13142
github.com/advisories/GHSA-vqj2-jf89-h87v
access.redhat.com/errata/RHSA-2007:0979
en.wikipedia.org/wiki/HTTP_response_splitting
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=246248
bugzilla.redhat.com/show_bug.cgi?id=333991
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0979.json
access.redhat.com/security/cve/CVE-2007-1095
bugzilla.redhat.com/show_bug.cgi?id=1618294
cve.org/CVERecord?id=CVE-2007-1095
nvd.nist.gov/vuln/detail/CVE-2007-1095
access.redhat.com/security/cve/CVE-2007-2292
bugzilla.redhat.com/show_bug.cgi?id=1618308
cve.org/CVERecord?id=CVE-2007-2292
nvd.nist.gov/vuln/detail/CVE-2007-2292
access.redhat.com/security/cve/CVE-2007-3511
bugzilla.redhat.com/show_bug.cgi?id=1618316
cve.org/CVERecord?id=CVE-2007-3511
access.redhat.com/security/cve/CVE-2007-3844
bugzilla.redhat.com/show_bug.cgi?id=250648
cve.org/CVERecord?id=CVE-2007-3844
nvd.nist.gov/vuln/detail/CVE-2007-3844
access.redhat.com/security/cve/CVE-2007-5334
bugzilla.redhat.com/show_bug.cgi?id=1618324
cve.org/CVERecord?id=CVE-2007-5334
nvd.nist.gov/vuln/detail/CVE-2007-5334
access.redhat.com/security/cve/CVE-2007-5337
bugzilla.redhat.com/show_bug.cgi?id=1618325
cve.org/CVERecord?id=CVE-2007-5337
nvd.nist.gov/vuln/detail/CVE-2007-5337
access.redhat.com/security/cve/CVE-2007-5338
bugzilla.redhat.com/show_bug.cgi?id=1618326
cve.org/CVERecord?id=CVE-2007-5338
nvd.nist.gov/vuln/detail/CVE-2007-5338
access.redhat.com/security/cve/CVE-2007-5339
bugzilla.redhat.com/show_bug.cgi?id=1618328
cve.org/CVERecord?id=CVE-2007-5339
nvd.nist.gov/vuln/detail/CVE-2007-5339
access.redhat.com/security/cve/CVE-2007-5340
bugzilla.redhat.com/show_bug.cgi?id=1618329
cve.org/CVERecord?id=CVE-2007-5340
nvd.nist.gov/vuln/detail/CVE-2007-5340
access.redhat.com/errata/RHSA-2007:0980
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0980.json
access.redhat.com/errata/RHSA-2007:0981
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0981.json