CVE-2007-3089
The MITRE CVE dictionary describes this issue as:
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
Find out more about CVE-2007-3089 from the MITRE CVE dictionary dictionary and NIST NVD.
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux 2.1 (seamonkey) | RHSA-2007:0722 | 2007-07-19 |
| Red Hat Enterprise Linux 5 (thunderbird) | RHSA-2007:0723 | 2007-07-19 |
| Red Hat Enterprise Linux 5 (firefox) | RHSA-2007:0724 | 2007-07-19 |
| Red Hat Enterprise Linux 3 (seamonkey) | RHSA-2007:0722 | 2007-07-19 |
| Red Hat Enterprise Linux 4 (firefox) | RHSA-2007:0724 | 2007-07-19 |
| Red Hat Enterprise Linux 4 (seamonkey) | RHSA-2007:0722 | 2007-07-19 |
| Red Hat Enterprise Linux 4 (thunderbird) | RHSA-2007:0723 | 2007-07-19 |
| Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) (thunderbird) | RHSA-2007:0723 | 2007-07-19 |
CVE description copyright © 2017, The MITRE Corporation