CVE-2007-0996 : Detail

CVE-2007-0996

3.75%V3
Network
2007-02-27
01h00 +00:00
2018-10-16
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Mozilla>>Firefox >> Version 1.5

Mozilla>>Firefox >> Version 1.5

Mozilla>>Firefox >> Version 1.5

Mozilla>>Firefox >> Version 1.5.0.1

Mozilla>>Firefox >> Version 1.5.0.2

Mozilla>>Firefox >> Version 1.5.0.3

Mozilla>>Firefox >> Version 1.5.0.4

Mozilla>>Firefox >> Version 1.5.0.5

Mozilla>>Firefox >> Version 1.5.0.6

Mozilla>>Firefox >> Version 1.5.0.7

Mozilla>>Firefox >> Version 1.5.0.8

Mozilla>>Firefox >> Version 1.5.0.9

Mozilla>>Firefox >> Version 2.0

Mozilla>>Firefox >> Version 2.0

    Mozilla>>Firefox >> Version 2.0

      Mozilla>>Firefox >> Version 2.0

        Mozilla>>Firefox >> Version 2.0.0.1

        Mozilla>>Seamonkey >> Version 1.0

        Mozilla>>Seamonkey >> Version 1.0

          Mozilla>>Seamonkey >> Version 1.0

            Mozilla>>Seamonkey >> Version 1.0

            Mozilla>>Seamonkey >> Version 1.0.1

            Mozilla>>Seamonkey >> Version 1.0.2

            Mozilla>>Seamonkey >> Version 1.0.3

            Mozilla>>Seamonkey >> Version 1.0.4

            Mozilla>>Seamonkey >> Version 1.0.5

            Mozilla>>Seamonkey >> Version 1.0.6

            Mozilla>>Seamonkey >> Version 1.0.7

            References

            http://www.redhat.com/support/errata/RHSA-2007-0078.html
            Tags : vendor-advisory, x_refsource_REDHAT
            http://secunia.com/advisories/24395
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/24328
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://www.redhat.com/support/errata/RHSA-2007-0108.html
            Tags : vendor-advisory, x_refsource_REDHAT
            http://secunia.com/advisories/24384
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/24457
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/24343
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://www.debian.org/security/2007/dsa-1336
            Tags : vendor-advisory, x_refsource_DEBIAN
            http://www.vupen.com/english/advisories/2007/0718
            Tags : vdb-entry, x_refsource_VUPEN
            http://secunia.com/advisories/24650
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://www.ubuntu.com/usn/usn-428-1
            Tags : vendor-advisory, x_refsource_UBUNTU
            http://secunia.com/advisories/24320
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/25588
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/24342
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/24287
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://www.securityfocus.com/bid/22694
            Tags : vdb-entry, x_refsource_BID
            http://fedoranews.org/cms/node/2713
            Tags : vendor-advisory, x_refsource_FEDORA
            http://www.redhat.com/support/errata/RHSA-2007-0097.html
            Tags : vendor-advisory, x_refsource_REDHAT
            http://www.securitytracker.com/id?1017702
            Tags : vdb-entry, x_refsource_SECTRACK
            http://fedoranews.org/cms/node/2728
            Tags : vendor-advisory, x_refsource_FEDORA
            http://secunia.com/advisories/24205
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/24333
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://osvdb.org/33812
            Tags : vdb-entry, x_refsource_OSVDB
            http://www.mandriva.com/security/advisories?name=MDKSA-2007:050
            Tags : vendor-advisory, x_refsource_MANDRIVA
            http://secunia.com/advisories/24290
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/24455
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://rhn.redhat.com/errata/RHSA-2007-0077.html
            Tags : vendor-advisory, x_refsource_REDHAT
            http://www.redhat.com/support/errata/RHSA-2007-0079.html
            Tags : vendor-advisory, x_refsource_REDHAT