Skip to content
OpenAdvisories
Unscored CVE-2007-3827 EUVD-2007-3811GHSA-2p26-9483-vh42

Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass informati…

Published Jul 17, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window.

References