{ "schema_version": "1.4.0", "id": "GHSA-j9xc-r2mv-xr3g", "modified": "2022-05-03T03:18:01Z", "published": "2022-05-03T03:18:01Z", "aliases": [ "CVE-2007-0981" ], "details": "Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0981" }, { "type": "WEB", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=370445" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32533" }, { "type": "WEB", "url": "https://issues.rpath.com/browse/RPL-1081" }, { "type": "WEB", "url": "https://issues.rpath.com/browse/RPL-1103" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9730" }, { "type": "WEB", "url": "http://fedoranews.org/cms/node/2713" }, { "type": "WEB", "url": "http://fedoranews.org/cms/node/2728" }, { "type": "WEB", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" }, { "type": "WEB", "url": "http://lcamtuf.dione.cc/ffhostname.html" }, { "type": "WEB", "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2007-0077.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/24175" }, { "type": "WEB", "url": "http://secunia.com/advisories/24205" }, { "type": "WEB", "url": "http://secunia.com/advisories/24238" }, { "type": "WEB", "url": "http://secunia.com/advisories/24287" }, { "type": "WEB", "url": "http://secunia.com/advisories/24290" }, { "type": "WEB", "url": "http://secunia.com/advisories/24293" }, { "type": "WEB", "url": "http://secunia.com/advisories/24320" }, { "type": "WEB", "url": "http://secunia.com/advisories/24328" }, { "type": "WEB", "url": "http://secunia.com/advisories/24333" }, { "type": "WEB", "url": "http://secunia.com/advisories/24342" }, { "type": "WEB", "url": "http://secunia.com/advisories/24343" }, { "type": "WEB", "url": "http://secunia.com/advisories/24384" }, { "type": "WEB", "url": "http://secunia.com/advisories/24393" }, { "type": "WEB", "url": "http://secunia.com/advisories/24395" }, { "type": "WEB", "url": "http://secunia.com/advisories/24437" }, { "type": "WEB", "url": "http://secunia.com/advisories/24455" }, { "type": "WEB", "url": "http://secunia.com/advisories/24457" }, { "type": "WEB", "url": "http://secunia.com/advisories/24650" }, { "type": "WEB", "url": "http://secunia.com/advisories/25588" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-200703-04.xml" }, { "type": "WEB", "url": "http://securityreason.com/securityalert/2262" }, { "type": "WEB", "url": "http://securitytracker.com/id?1017654" }, { "type": "WEB", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131" }, { "type": "WEB", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851" }, { "type": "WEB", "url": "http://www.debian.org/security/2007/dsa-1336" }, { "type": "WEB", "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml" }, { "type": "WEB", "url": "http://www.kb.cert.org/vuls/id/885753" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:050" }, { "type": "WEB", "url": "http://www.mozilla.org/security/announce/2007/mfsa2007-07.html" }, { "type": "WEB", "url": "http://www.novell.com/linux/security/advisories/2007_22_mozilla.html" }, { "type": "WEB", "url": "http://www.osvdb.org/32104" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2007-0078.html" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2007-0079.html" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2007-0097.html" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2007-0108.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/460126/100/200/threaded" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/460217/100/0/threaded" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/461336/100/0/threaded" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/461809/100/0/threaded" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/22566" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/usn-428-1" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2007/0624" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2007/0718" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2008/0083" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2007-02-16T01:28:00Z" } }