CVE-2007-1970

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which…

published April 11, 2007

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00934 · 60.2th percentile
Published
2007-04-11T10:00Z
EPSS history
Timeline
  • 11 APR 10:00Z
    Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which…
    cvelistv5