CVE-2007-3089
UnknownEPSS 2.77%
Last modified
CVE-2007-3089 is a vulnerability of currently unknown severity. Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.. EPSS estimates a 2.77% chance of exploitation in the next 30 days.
Description
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | <= 2.0.0.4 |
| Mozilla | Firefox | 0.8 |
| Mozilla | Firefox | 0.9 |
| Mozilla | Firefox | 0.9.1 |
| Mozilla | Firefox | 0.9.2 |
| Mozilla | Firefox | 0.9.3 |
| Mozilla | Firefox | 0.10 |
| Mozilla | Firefox | 0.10.1 |
| Mozilla | Firefox | 1.0 |
| Mozilla | Firefox | 1.0.1 |
| Mozilla | Firefox | 1.0.2 |
| Mozilla | Firefox | 1.0.3 |
| Mozilla | Firefox | 1.0.4 |
| Mozilla | Firefox | 1.0.5 |
| Mozilla | Firefox | 1.0.6 |
| Mozilla | Firefox | 1.0.7 |
| Mozilla | Firefox | 1.0.8 |
| Mozilla | Firefox | 1.5 |
| Mozilla | Firefox | 1.5.0.1 |
| Mozilla | Firefox | 1.5.0.2 |
| Mozilla | Firefox | 1.5.0.3 |
| Mozilla | Firefox | 1.5.0.4 |
| Mozilla | Firefox | 1.5.0.5 |
| Mozilla | Firefox | 1.5.0.6 |
| Mozilla | Firefox | 1.5.0.7 |
| Mozilla | Firefox | 1.5.0.8 |
| Mozilla | Firefox | 1.5.0.9 |
| Mozilla | Firefox | 1.5.0.10 |
| Mozilla | Firefox | 1.5.0.11 |
| Mozilla | Firefox | 1.5.1 |
| Mozilla | Firefox | 1.5.2 |
| Mozilla | Firefox | 1.5.3 |
| Mozilla | Firefox | 1.5.4 |
| Mozilla | Firefox | 1.5.5 |
| Mozilla | Firefox | 1.5.6 |
| Mozilla | Firefox | 1.5.7 |
| Mozilla | Firefox | 1.5.8 |
| Mozilla | Firefox | 2.0 |
| Mozilla | Firefox | 2.0.0.1 |
| Mozilla | Firefox | 2.0.0.2 |
| Mozilla | Firefox | 2.0.0.3 |
References
- http://secunia.com/advisories/25589Vendor Advisory
- http://secunia.com/advisories/26072Vendor Advisory
- http://secunia.com/advisories/26095Vendor Advisory
- http://secunia.com/advisories/26103Vendor Advisory
- http://secunia.com/advisories/26106Vendor Advisory
- http://secunia.com/advisories/26107Vendor Advisory
- http://secunia.com/advisories/26149Vendor Advisory
- http://secunia.com/advisories/26151Vendor Advisory
- http://secunia.com/advisories/26159Vendor Advisory
- http://secunia.com/advisories/26179Vendor Advisory
- http://secunia.com/advisories/26204Vendor Advisory
- http://secunia.com/advisories/26205Vendor Advisory
- http://secunia.com/advisories/26211Vendor Advisory
- http://secunia.com/advisories/26216Vendor Advisory
- http://secunia.com/advisories/26258Vendor Advisory
- http://secunia.com/advisories/26271Vendor Advisory
- http://secunia.com/advisories/26460Vendor Advisory
- http://secunia.com/advisories/28135Vendor Advisory
- http://www.kb.cert.org/vuls/id/143297US Government Resource
- http://www.redhat.com/support/errata/RHSA-2007-0722.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0723.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0724.htmlVendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA07-199A.htmlUS Government Resource
- http://secunia.com/advisories/25589Vendor Advisory
- http://secunia.com/advisories/26072Vendor Advisory
- http://secunia.com/advisories/26095Vendor Advisory
- http://secunia.com/advisories/26103Vendor Advisory
- http://secunia.com/advisories/26106Vendor Advisory
- http://secunia.com/advisories/26107Vendor Advisory
- http://secunia.com/advisories/26149Vendor Advisory
- http://secunia.com/advisories/26151Vendor Advisory
- http://secunia.com/advisories/26159Vendor Advisory
- http://secunia.com/advisories/26179Vendor Advisory
- http://secunia.com/advisories/26204Vendor Advisory
- http://secunia.com/advisories/26205Vendor Advisory
- http://secunia.com/advisories/26211Vendor Advisory
- http://secunia.com/advisories/26216Vendor Advisory
- http://secunia.com/advisories/26258Vendor Advisory
- http://secunia.com/advisories/26271Vendor Advisory
- http://secunia.com/advisories/26460Vendor Advisory
- http://secunia.com/advisories/28135Vendor Advisory
- http://www.kb.cert.org/vuls/id/143297US Government Resource
- http://www.redhat.com/support/errata/RHSA-2007-0722.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0723.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0724.htmlVendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA07-199A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3089?
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
How severe is CVE-2007-3089?
Severity scoring for CVE-2007-3089 is pending analysis. The EPSS model estimates a 2.77% probability of exploitation in the next 30 days.
How do I fix CVE-2007-3089?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-3083Z-Blog 1.7 stores sensitive information under the web root w…
- CVE-2007-3084PHP remote file inclusion vulnerability in sampleblogger.php…
- CVE-2007-3085Multiple PHP remote file inclusion vulnerabilities in PBSite…
- CVE-2007-3086Unrestricted critical resource lock in Agnitum Outpost Firew…
- CVE-2007-3087Peercast places a cleartext password in a query string, whic…
- CVE-2007-3088SQL injection vulnerability in index.php in Comicsense allow…
- CVE-2007-3090Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2007-3091Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7…
- CVE-2007-3092Microsoft Internet Explorer 6 allows remote attackers to spo…
- CVE-2007-3093Unspecified vulnerability in the logging mechanism in Solari…
- CVE-2007-3094Unspecified vulnerability in the authentication mechanism in…
- CVE-2007-3095Unspecified vulnerability in Symantec Reporting Server 1.0.1…
Are you affected by CVE-2007-3089?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST