CVE-2007-1084

Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by…

published February 23, 2007

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into saving a bookmarklet with a data: scheme, which is executed in the context of the last visited web page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01514 · 74.3th percentile
Published
2007-02-23T00:00Z
EPSS history
Timeline
  • 23 FEB 00:00Z
    Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by…
    cvelistv5