CVE-2007-3736

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script "into another site's context" via a "timing issue" involving the (1) addEventListener or (2) setTimeout function, probably by setting events that activate after the context has changed.

🔗 References (86)

• secalert@redhatftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt
• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc
• secalert@redhathttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
• secalert@redhathttp://secunia.com/advisories/25589
• secalert@redhathttp://secunia.com/advisories/26072
• secalert@redhathttp://secunia.com/advisories/26095
• secalert@redhathttp://secunia.com/advisories/26103
• secalert@redhathttp://secunia.com/advisories/26106
• secalert@redhathttp://secunia.com/advisories/26107
• secalert@redhathttp://secunia.com/advisories/26149
• secalert@redhathttp://secunia.com/advisories/26151
• secalert@redhathttp://secunia.com/advisories/26159
• secalert@redhathttp://secunia.com/advisories/26179
• secalert@redhathttp://secunia.com/advisories/26204
• secalert@redhathttp://secunia.com/advisories/26205