Description
A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | mozilla-firefox | 1.0.4-2sarge17 | DSA-1336-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | devhelp +1 | 0.12-10.0.1.el5 | RHSA-2007:0097 |
| RHEL 5 | firefox | 1.5.0.10-2.el5 | RHSA-2007:0097 |
| RHEL 5 | yelp | 2.16.0-14.0.1.el5 | RHSA-2007:0097 |
| RHEL 4 | devhelp +1 | 0.10-0.7.el4 | RHSA-2007:0077 |
| RHEL 4 | firefox | 1.5.0.10-0.1.el4 | RHSA-2007:0079 |
| RHEL 4 | seamonkey +5 | 1.0.8-0.2.el4 | RHSA-2007:0077 |
| RHEL 3 | seamonkey +9 | 1.0.8-0.2.el3 | RHSA-2007:0077 |
| RHEL 2 | seamonkey +9 | 1.0.8-0.2.el2 | RHSA-2007:0077 |
Advisories 4
- RHSA-2007:0097 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0079 Red Hat Security Advisory: Firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0077 Red Hat Security Advisory: seamonkey security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1336-1 mozilla-firefox Debian Security (DSA / DLA) · Mar 9, 2026
References
- RHSA-2007:0078 vendor-advisory
- oval:org.mitre.oval:def:9749 vdb-entry signature
- 24395 third-party-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733
- SSA:2007-066-03 vendor-advisory
- 24384 third-party-advisory
- 24457 third-party-advisory
- DSA-1336 vendor-advisory
- HPSBUX02153 vendor-advisory
- 24650 third-party-advisory
- http://www.mozilla.org/security/announce/2007/mfsa2007-09.html
- 25588 third-party-advisory
- https://issues.rpath.com/browse/RPL-1103
- 1017726 vdb-entry
- SUSE-SA:2007:019 vendor-advisory
- SUSE-SA:2007:022 vendor-advisory
- ADV-2007-0823 vdb-entry
- RHSA-2007:0097 vendor-advisory
- 24455 third-party-advisory
- SSA:2007-066-05 vendor-advisory
- 22826 vdb-entry