CVE-2007-3089

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-06 · updated 2026-06-16

Description

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.

Affected products

Mozilla Firefox: through 2.0.0.4; 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3, 0.10 (+34)

References

http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
http://lcamtuf.coredump.cx/ifsnatch/
http://osvdb.org/38024
http://secunia.com/advisories/25589
http://secunia.com/advisories/26072
http://secunia.com/advisories/26095
http://secunia.com/advisories/26103
http://secunia.com/advisories/26106
http://secunia.com/advisories/26107

Get alerted when CVE-2007-3089 or the next vulnerability affects your stack