CVE-2007-1116

Published: 26 February 2007

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history.

Priority

Status

Package	Release	Status
xulrunner Launchpad, Ubuntu, Debian	dapper	Does not exist
	edgy	Ignored (end of life, was needed)
	feisty	Ignored (end of life, was needed)
	gutsy	Released (1.8.1.4-2ubuntu3)
	hardy	Released (1.8.1.4-2ubuntu3)
	upstream	Needs triage

References

https://www.cve.org/CVERecord?id=CVE-2007-1116
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.