CVE-2007-5947
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves...
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.
Exploit likelihood
What each source reports
NVD Score used
4.3
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.
- Record
CVE-2007-5947- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.
- Record
CVE-2007-5947- Updated
- 2026-11-02
EUVDEUVD-2007-5917 No score
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.
- Record
EUVD-2007-5917- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2cph-6c7j-7mmc No score
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves...
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.
- Record
GHSA-2cph-6c7j-7mmc- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 From an advisory covering 3 CVEs |
before 2.0.0.10-0etch1, plus listed versions 2.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch1 Show 12 moreShow less2.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.10-0etch1 |
xulrunnerDebian:4.0 From an advisory covering 3 CVEs |
before 1.8.0.14~pre071019c-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 6 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny1 |
1.8.0.14~pre071019c-0etch1 |
iceapeDebian:4.0 From an advisory covering 15 CVEs |
before 1.0.12~pre080131b-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch11.0.11~pre071022-0etch1+lenny11.0.8-41.0.9-0etch1 |
1.0.12~pre080131b-0etch1 |
firefoxRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
Show 155 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefox-debuginfoRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkeyRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nsprRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nspr-develRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nssRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nss-develRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nsprRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nspr-develRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nssRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nss-develRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5947 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published November 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.71%, the 86th percentile. No source names a fixed version.
References
secunia.com/advisories/27816
browser.netscape.com/releasenotes
secunia.com/advisories/27855
debian.org/security/2007/dsa-1424
lists.opensuse.org/opensuse-security-announce/2007-12/msg00004.html
security.gentoo.org/glsa/glsa-200712-21.xml
Show 76 moreShow less
wiki.rpath.com/wiki/Advisories:rPSA-2007-0260
issues.rpath.com/browse/RPL-1995
secunia.com/advisories/28277
mozilla.org/security/announce/2007/mfsa2007-37.html
secunia.com/advisories/27845
redhat.com/support/errata/RHSA-2007-1083.html
wiki.rpath.com/wiki/Advisories:rPSA-2008-0093
bugs.gentoo.org/show_bug.cgi?id=200909
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9873
vupen.com/english/advisories/2008/0643
redhat.com/archives/fedora-package-announce/2007-November/msg01011.html
redhat.com/support/errata/RHSA-2007-1082.html
secunia.com/advisories/27605
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374833
secunia.com/advisories/28016
redhat.com/archives/fedora-package-announce/2007-December/msg00168.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
mandriva.com/security/advisories?name=MDKSA-2007:246
usn.ubuntu.com/546-1
vupen.com/english/advisories/2007/4018
securityfocus.com/archive/1/488971/100/0/threaded
secunia.com/advisories/27838
redhat.com/archives/fedora-package-announce/2007-December/msg00135.html
securityfocus.com/archive/1/488002/100/0/threaded
vupen.com/english/advisories/2007/4002
securityfocus.com/bid/26385
sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1
kb.cert.org/vuls/id/715737
secunia.com/advisories/27793
bugs.gentoo.org/show_bug.cgi?id=198965
vupen.com/english/advisories/2008/0083
gnucitizen.org/blog/web-mayhem-firefoxs-jar-protocol-issues
secunia.com/advisories/27955
wiki.rpath.com/Advisories:rPSA-2008-0093
ubuntu.com/usn/usn-546-2
redhat.com/archives/fedora-package-announce/2007-December/msg00115.html
sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1
secunia.com/advisories/27957
exchange.xforce.ibmcloud.com/vulnerabilities/38356
secunia.com/advisories/28398
secunia.com/advisories/29164
secunia.com/advisories/28001
secunia.com/advisories/27796
securitytracker.com/id?1018928
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.365006
issues.rpath.com/browse/RPL-1984
secunia.com/advisories/27797
secunia.com/advisories/27979
secunia.com/advisories/28171
secunia.com/advisories/27800
redhat.com/support/errata/RHSA-2007-1084.html
debian.org/security/2007/dsa-1425
bugzilla.mozilla.org/show_bug.cgi?id=369814
vupen.com/english/advisories/2007/3818
secunia.com/advisories/27944
nvd.nist.gov/vuln/detail/CVE-2007-5947
github.com/advisories/GHSA-2cph-6c7j-7mmc
access.redhat.com/errata/RHSA-2007:1082
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=394211
bugzilla.redhat.com/show_bug.cgi?id=394241
bugzilla.redhat.com/show_bug.cgi?id=394261
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1082.json
access.redhat.com/security/cve/CVE-2007-5947
cve.org/CVERecord?id=CVE-2007-5947
access.redhat.com/security/cve/CVE-2007-5959
cve.org/CVERecord?id=CVE-2007-5959
nvd.nist.gov/vuln/detail/CVE-2007-5959
access.redhat.com/security/cve/CVE-2007-5960
cve.org/CVERecord?id=CVE-2007-5960
nvd.nist.gov/vuln/detail/CVE-2007-5960
access.redhat.com/errata/RHSA-2007:1083
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1083.json
access.redhat.com/errata/RHSA-2007:1084
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1084.json