CVE-2007-3089
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1)...
4.3 Medium
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
Exploit likelihood
2.77%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
- Record
CVE-2007-3089- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
- Record
CVE-2007-3089- Updated
- 2026-11-02
EUVDEUVD-2007-3081 No score
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
- Record
EUVD-2007-3081- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w739-3fq5-fgvp No score
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1)...
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
- Record
GHSA-w739-3fq5-fgvp- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score
MozillaFirefox-92.0-1.2 on GA media
These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10600-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score
MozillaThunderbird-91.1.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10601-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 From an advisory covering 7 CVEs |
before 1.8.0.13~pre070720-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 |
1.8.0.13~pre070720-0etch1 |
iceweaselDebian:4.0 From an advisory covering 8 CVEs |
before 2.0.0.5-0etch1, plus listed versions 2.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-1 |
2.0.0.5-0etch1 |
iceapeDebian:4.0 From an advisory covering 7 CVEs |
before 1.0.10~pre070720-0etch1, plus listed versions 1.0.8-41.0.9-0etch1 |
1.0.10~pre070720-0etch1 |
iceweaselDebian:5.0 From an advisory covering 14 CVEs |
before 2.0.0.5-0etch1+lenny1 | 2.0.0.5-0etch1+lenny1 |
iceapeDebian:5.0 From an advisory covering 14 CVEs |
before 1.0.10~pre070720-0etch1+lenny1 | 1.0.10~pre070720-0etch1+lenny1 |
xulrunnerDebian:5.0 From an advisory covering 17 CVEs |
before 1.8.0.13~pre070720-0etch3+lenny1 | 1.8.0.13~pre070720-0etch3+lenny1 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
Show 133 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.4.el2 | 0:1.0.9-0.4.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.3.el3 | 0:1.0.9-0.3.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.0.9-4.el4 | 0:1.0.9-4.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.5.0.12-3.el5 | 0:1.5.0.12-3.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.5.0.12-3.el5 | 0:1.5.0.12-3.el5 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.5.0.12-0.3.el4 | 0:1.5.0.12-0.3.el4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.12-3.el5 | 0:1.5.0.12-3.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.12-3.el5 | 0:1.5.0.12-3.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.12-3.el5 | 0:1.5.0.12-3.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.12-3.el5 | 0:1.5.0.12-3.el5 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 661 CVEs |
before 92.0-1.2 | 92.0-1.2 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 394 CVEs |
before 91.1.1-1.1 | 91.1.1-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3089 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published June 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.77%, the 86th percentile. No source names a fixed version.
References
ubuntu.com/usn/usn-490-1
securitytracker.com/id?1018412
secunia.com/advisories/26107
kb.cert.org/vuls/id/143297
vupen.com/english/advisories/2007/4256
Show 194 moreShow less
lcamtuf.coredump.cx/ifsnatch
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
mandriva.com/security/advisories?name=MDKSA-2007:152
gentoo.org/security/en/glsa/glsa-200708-09.xml
mozilla.org/security/announce/2007/mfsa2007-20.html
debian.org/security/2007/dsa-1339
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11122
us-cert.gov/cas/techalerts/TA07-199A.html
archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html
exchange.xforce.ibmcloud.com/vulnerabilities/34701
securityfocus.com/archive/1/470446/100/0/threaded
sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1
securityreason.com/securityalert/2781
novell.com/linux/security/advisories/2007_49_mozilla.html
bugzilla.mozilla.org/show_bug.cgi?id=381300
support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html
redhat.com/support/errata/RHSA-2007-0724.html
osvdb.org/38024
nvd.nist.gov/vuln/detail/CVE-2007-3089
github.com/advisories/GHSA-w739-3fq5-fgvp
access.redhat.com/errata/RHSA-2007:0722
bugzilla.redhat.com/show_bug.cgi?id=248518
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0722.json
cve.org/CVERecord?id=CVE-2007-3089
suse.com/security/cve/CVE-2006-6077
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
This page doesn't list everything
Left out here: 1,838 references. The JSON record has them.