CVE-2007-3089

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank…

published June 6, 2007

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02774 · 86.2th percentile
Published
2007-06-06T21:00Z
EPSS history
Timeline
  • 06 JUN 21:00Z
    Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank…
    cvelistv5