CVE-2007-3511 — Mozilla Firefox vulnerability

9 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
4.5%
top 10.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla SeamonkeyMicrosoft Internet Explorer
Timeline
PublishedJul 3
Latest updateMay 1

Description

The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDmozilla/firefox2.0.0.7+4
▶NVDmozilla/seamonkey1.1.4+15

🔴Vulnerability Details

2
GHSA
GHSA-9mmm-2pp6-2xv5: The focus handling for the onkeydown event in Microsoft Internet Explorer 6↗2022-05-01
▶
GHSA
GHSA-vqj2-jf89-h87v: The focus handling for the onkeydown event in Mozilla Firefox 1↗2022-05-01
▶

📋Vendor Advisories

3
Ubuntu
Thunderbird vulnerabilities↗2007-10-23
▶
Ubuntu
Firefox vulnerabilities↗2007-10-22
▶
Red Hat
security flaw↗2007-06-30
▶

💬Community

2
Bugzilla
CVE-2007-3511 security flaw↗2018-08-16
▶
Bugzilla
Mozilla products security update (CVE-2007-1095, CVE-2007-2292, CVE-2007-3511, CVE-2007-3844, CVE-2007-5334, CVE-2007-5337, CVE-2007-5338, CVE-2007-5339, CVE-2007-5340)↗2007-10-16
▶