CVE-2007-5960
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window...
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.
Exploit likelihood
What each source reports
NVD Score used
4.3
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.
- Record
CVE-2007-5960- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.
- Record
CVE-2007-5960- Updated
- 2026-11-02
EUVDEUVD-2007-5930 No score
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.
- Record
EUVD-2007-5930- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9vw2-7m33-r6hw No score
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window...
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.
- Record
GHSA-9vw2-7m33-r6hw- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 From an advisory covering 3 CVEs |
before 2.0.0.10-0etch1, plus listed versions 2.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch1 Show 12 moreShow less2.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6+2.0.0.8-0etch12.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-12.0.0.7-12.0.0.7-22.0.0.8-12.0.0.9-12.0.0.9-2 |
2.0.0.10-0etch1 |
xulrunnerDebian:4.0 From an advisory covering 3 CVEs |
before 1.8.0.14~pre071019c-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 6 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny11.8.0.14~pre071019b-0etch11.8.0.14~pre071019b-0lenny1 |
1.8.0.14~pre071019c-0etch1 |
iceapeDebian:4.0 From an advisory covering 15 CVEs |
before 1.0.12~pre080131b-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch11.0.11~pre071022-0etch1+lenny11.0.8-41.0.9-0etch1 |
1.0.12~pre080131b-0etch1 |
firefoxRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
Show 155 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefox-debuginfoRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.5.0.12-0.8.el4 | 0:1.5.0.12-0.8.el4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el4 | 0:1.5.0.12-7.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 3 CVEs |
before 0:1.5.0.12-7.el5 | 0:1.5.0.12-7.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el2 | 0:1.0.9-0.7.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.0.9-0.7.el3 | 0:1.0.9-0.7.el3 |
seamonkeyRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nsprRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nspr-develRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nssRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nss-develRed Hat:rhel_eus:4.5::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nsprRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nspr-develRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nssRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-nss-develRed Hat:rhel_eus:4.5::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.0.9-7.el4 | 0:1.0.9-7.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5960 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published November 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. No source names a fixed version.
References
secunia.com/advisories/27816
browser.netscape.com/releasenotes
secunia.com/advisories/27855
debian.org/security/2007/dsa-1424
securityfocus.com/bid/26589
lists.opensuse.org/opensuse-security-announce/2007-12/msg00004.html
Show 72 moreShow less
security.gentoo.org/glsa/glsa-200712-21.xml
wiki.rpath.com/wiki/Advisories:rPSA-2007-0260
issues.rpath.com/browse/RPL-1995
secunia.com/advisories/28277
secunia.com/advisories/27845
redhat.com/support/errata/RHSA-2007-1083.html
wiki.rpath.com/wiki/Advisories:rPSA-2008-0093
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9794
bugs.gentoo.org/show_bug.cgi?id=200909
vupen.com/english/advisories/2008/0643
redhat.com/archives/fedora-package-announce/2007-November/msg01011.html
redhat.com/support/errata/RHSA-2007-1082.html
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374833
secunia.com/advisories/28016
redhat.com/archives/fedora-package-announce/2007-December/msg00168.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
mandriva.com/security/advisories?name=MDKSA-2007:246
usn.ubuntu.com/546-1
vupen.com/english/advisories/2007/4018
securityfocus.com/archive/1/488971/100/0/threaded
secunia.com/advisories/27838
redhat.com/archives/fedora-package-announce/2007-December/msg00135.html
securitytracker.com/id?1018995
securityfocus.com/archive/1/488002/100/0/threaded
vupen.com/english/advisories/2007/4002
sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1
secunia.com/advisories/27793
bugs.gentoo.org/show_bug.cgi?id=198965
vupen.com/english/advisories/2008/0083
secunia.com/advisories/27955
wiki.rpath.com/Advisories:rPSA-2008-0093
ubuntu.com/usn/usn-546-2
redhat.com/archives/fedora-package-announce/2007-December/msg00115.html
sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1
secunia.com/advisories/27957
secunia.com/advisories/28398
secunia.com/advisories/29164
exchange.xforce.ibmcloud.com/vulnerabilities/38644
secunia.com/advisories/28001
secunia.com/advisories/27796
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.365006
issues.rpath.com/browse/RPL-1984
secunia.com/advisories/27797
secunia.com/advisories/27979
secunia.com/advisories/28171
secunia.com/advisories/27800
redhat.com/support/errata/RHSA-2007-1084.html
debian.org/security/2007/dsa-1425
mozilla.org/security/announce/2007/mfsa2007-39.html
secunia.com/advisories/27944
secunia.com/advisories/27725
nvd.nist.gov/vuln/detail/CVE-2007-5960
access.redhat.com/errata/RHSA-2007:1082
access.redhat.com/errata/RHSA-2007:1083
access.redhat.com/errata/RHSA-2007:1084
access.redhat.com/security/cve/CVE-2007-5960
bugzilla.redhat.com/show_bug.cgi?id=394261
github.com/advisories/GHSA-9vw2-7m33-r6hw
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=394211
bugzilla.redhat.com/show_bug.cgi?id=394241
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1082.json
access.redhat.com/security/cve/CVE-2007-5947
cve.org/CVERecord?id=CVE-2007-5947
nvd.nist.gov/vuln/detail/CVE-2007-5947
access.redhat.com/security/cve/CVE-2007-5959
cve.org/CVERecord?id=CVE-2007-5959
nvd.nist.gov/vuln/detail/CVE-2007-5959
cve.org/CVERecord?id=CVE-2007-5960
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1083.json
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1084.json