CVE-2007-0981
NoneCVSS
—
EPSS
12.5%
Published
Feb 16, 2007
CISA due date
—
The record
Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.1 | mozilla-firefox | 0 | 1.0.4-2sarge17 |
| Red Hat:enterprise_linux:2.1::as | seamonkey | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-chat | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-mail | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nspr | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nss | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-chat | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-mail | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nspr | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nss | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-chat | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-mail | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nspr | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nss | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-chat | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-mail | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nspr | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nss | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el2 |
| Red Hat:enterprise_linux:3::as | seamonkey | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-chat | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-mail | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-chat | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-mail | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-chat | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-mail | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-chat | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-mail | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss-devel | 0 | 0:1.0.8-0.2.el3 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.10-0.7.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.8-0.2.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.5.0.10-0.1.el4 |
| Red Hat:enterprise_linux:5::client | devhelp | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client | devhelp-debuginfo | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client | devhelp-devel | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:1.5.0.10-2.el5 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:1.5.0.10-2.el5 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:1.5.0.10-1.el5 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:1.5.0.10-1.el5 |
| Red Hat:enterprise_linux:5::client | yelp | 0 | 0:2.16.0-14.0.1.el5 |
| Red Hat:enterprise_linux:5::client | yelp-debuginfo | 0 | 0:2.16.0-14.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp-debuginfo | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp-devel | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::server | devhelp | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::server | devhelp-debuginfo | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::server | devhelp-devel | 0 | 0:0.12-10.0.1.el5 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:1.5.0.10-2.el5 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:1.5.0.10-2.el5 |
| Red Hat:enterprise_linux:5::server | yelp | 0 | 0:2.16.0-14.0.1.el5 |
| Red Hat:enterprise_linux:5::server | yelp-debuginfo | 0 | 0:2.16.0-14.0.1.el5 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 92.0-1.2 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2007-0009 Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services… Also affects mozilla-firefox
- CVE-2007-0045 Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before… Also affects mozilla-firefox
- CVE-2006-1993 Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a… Also affects mozilla-firefox
- CVE-2006-1730 Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before… Also affects mozilla-firefox
- CVE-2006-0749 nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before… Also affects mozilla-firefox
- CVE-2005-4134 Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote… Also affects mozilla-firefox
- CVE-2005-2871 Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6… Also affects mozilla-firefox
- CVE-2005-2265 Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote… Also affects mozilla-firefox