Upstream information
CVE-2007-0800 at MITRE
Description
Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup.
NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)
Novell/SUSE information
Novell Bugzilla entry:
244923
SUSE Security Advisories:
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|
| SUSE LINUX 10.1 | seamonkey >= 1.0.8-0.1seamonkey-calendar >= 1.0.8-0.1seamonkey-dom-inspector >= 1.0.8-0.1seamonkey-irc >= 1.0.8-0.1seamonkey-mail >= 1.0.8-0.1seamonkey-spellchecker >= 1.0.8-0.1seamonkey-venkman >= 1.0.8-0.1
| |
Novell Linux Desktop 9 for x86
Novell Linux Desktop 9 for x86_64 | MozillaFirefox >= 1.5.0.10-0.2MozillaFirefox-translations >= 1.5.0.10-0.2
| Builds
YOU Patch Nr: 11446 |
| Novell Linux Desktop 9 for x86 | mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-cs >= 1.8_seamonkey_1.0.4-0.4mozilla-deat >= 1.8_seamonkey_1.0.4-0.4mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-hu >= 1.80_seamonkey_1.0.4-2mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1
| core9.s390
core9.x86
YOU Patch Nr: 11458 |
| Novell Linux Desktop 9 for x86_64 | mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-cs >= 1.8_seamonkey_1.0.4-0.4mozilla-deat >= 1.8_seamonkey_1.0.4-0.4mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-hu >= 1.80_seamonkey_1.0.4-2mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-lib64 >= 1.6-0.8mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1
| core9.s390
core9.x86
YOU Patch Nr: 11458 |
| Open Enterprise Server | mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-calendar >= 1.8_seamonkey_1.0.8-0.1mozilla-cs >= 1.8_seamonkey_1.0.4-0.4mozilla-deat >= 1.8_seamonkey_1.0.4-0.4mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-hu >= 1.80_seamonkey_1.0.4-2mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1
| core9.s390
core9.x86
YOU Patch Nr: 11458 |
SUSE LINUX 10.0
SUSE LINUX 10.1
SUSE LINUX 9.3 | MozillaFirefox >= 1.5.0.10-0.2MozillaFirefox-translations >= 1.5.0.10-0.2
| |
| SUSE LINUX 10.0 | mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-calendar >= 1.8_seamonkey_1.0.8-0.1mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-ko >= 1.75-3.2mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-spellchecker >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1mozilla-zh-CN >= 1.7-6.2mozilla-zh-TW >= 1.7-6.2
| |
| SUSE LINUX 9.3 | galeon >= 2.0.0-28.2mozilla >= 1.8_seamonkey_1.0.8-0.1mozilla-32bit >= 9.3-7.6mozilla-calendar >= 1.8_seamonkey_1.0.8-0.1mozilla-devel >= 1.8_seamonkey_1.0.8-0.1mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.1mozilla-irc >= 1.8_seamonkey_1.0.8-0.1mozilla-ko >= 1.72-4.2mozilla-mail >= 1.8_seamonkey_1.0.8-0.1mozilla-spellchecker >= 1.8_seamonkey_1.0.8-0.1mozilla-venkman >= 1.8_seamonkey_1.0.8-0.1mozilla-zh-CN >= 1.7-4.2mozilla-zh-TW >= 1.7-4.2
| |
SUSE LINUX Retail Solution 8
SuSE Linux Enterprise Server 8 for AMD64
SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries
SuSE Linux Enterprise Server 8 for IBM zSeries
SuSE Linux Enterprise Server 8 for IPF
SuSE Linux Openexchange Server 4
SuSE Linux School Server for i386
SuSE Linux Standard Server 8
UnitedLinux 1.0 | mozilla >= 1.8_seamonkey_1.0.8-0.3mozilla-calendar >= 1.8_seamonkey_1.0.8-0.3mozilla-devel >= 1.8_seamonkey_1.0.8-0.3mozilla-dom-inspector >= 1.8_seamonkey_1.0.8-0.3mozilla-irc >= 1.8_seamonkey_1.0.8-0.3mozilla-mail >= 1.8_seamonkey_1.0.8-0.3mozilla-spellchecker >= 1.8_seamonkey_1.0.8-0.3mozilla-venkman >= 1.8_seamonkey_1.0.8-0.3mozilla-xmlterm >= 1.8_seamonkey_1.0.8-0.3
| slrs8.x86
ul1.s390
YOU Patch Nr: 11459 |
