CVE-2007-3844
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows...
4.3 MediumPublic exploit
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
Exploit likelihood
5.45%Down 35.3 points since Feb 4, 2022
What each source reports
NVD Score used
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
- Record
CVE-2007-3844- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
- Record
CVE-2007-3844- Updated
- 2026-11-02
EUVDEUVD-2007-3828 No score
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
- Record
EUVD-2007-3828- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6p6h-7mm4-6mhv No score
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows...
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
- Record
GHSA-6p6h-7mm4-6mhv- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 From an advisory covering 3 CVEs |
before 2.0.0.6-0etch1, plus listed versions 2.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-2 |
2.0.0.6-0etch1 |
xulrunnerDebian:4.0 From an advisory covering 3 CVEs |
before 1.8.0.13~pre070720-0etch3, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch11.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch2 |
1.8.0.13~pre070720-0etch3 |
iceapeDebian:4.0 From an advisory covering 3 CVEs |
before 1.0.10~pre070720-0etch3, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.8-41.0.9-0etch1 |
1.0.10~pre070720-0etch3 |
icedoveDebian:4.0 From an advisory covering 6 CVEs |
before 1.5.0.13+1.5.0.14b.dfsg1-0etch1, plus listed versions 1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny1 |
1.5.0.13+1.5.0.14b.dfsg1-0etch1 |
xulrunnerDebian:5.0 From an advisory covering 17 CVEs |
before 1.8.0.13~pre070720-0etch3+lenny1 | 1.8.0.13~pre070720-0etch3+lenny1 |
iceapeDebian:5.0 From an advisory covering 3 CVEs |
before 1.0.10~pre070720-0etch3+lenny1 | 1.0.10~pre070720-0etch3+lenny1 |
iceweaselDebian:5.0 From an advisory covering 3 CVEs |
before 2.0.0.6-0etch1+lenny1 | 2.0.0.6-0etch1+lenny1 |
icedoveDebian:5.0 From an advisory covering 6 CVEs |
before 1.5.0.13+1.5.0.14b.dfsg1-0lenny1 | 1.5.0.13+1.5.0.14b.dfsg1-0lenny1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
Show 132 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-5.el5 | 0:1.5.0.12-5.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-5.el5 | 0:1.5.0.12-5.el5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Mozilla Firefox/Thunderbird/SeaMonkey - Chrome-Loaded About:Blank Script Execution | 2007-07-31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, exploits, facts, published, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3844 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published August 3, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.45%, the 92nd percentile. No source names a fixed version.
References
redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
issues.rpath.com/browse/RPL-1600
ubuntu.com/usn/usn-503-1
mandriva.com/security/advisories?name=MDVSA-2008:047
vupen.com/english/advisories/2007/3587
secunia.com/advisories/27414
Show 97 moreShow less
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579
bugzilla.mozilla.org/show_bug.cgi?id=388121
gentoo.org/security/en/glsa/glsa-200708-09.xml
securitytracker.com/id?1018481
debian.org/security/2007/dsa-1345
novell.com/linux/security/advisories/2007_57_mozilla.html
securityfocus.com/bid/25142
mozilla.org/security/announce/2007/mfsa2007-26.html
sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1
support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9493
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.010101
nvd.nist.gov/vuln/detail/CVE-2007-3844
github.com/advisories/GHSA-6p6h-7mm4-6mhv
access.redhat.com/errata/RHSA-2007:0979
en.wikipedia.org/wiki/HTTP_response_splitting
bugzilla.redhat.com/show_bug.cgi?id=246248
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0979.json
cve.org/CVERecord?id=CVE-2007-1095