CVE catalog

CVE-2007-5960

iceweasel - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.47% · Oct 25, 2026

Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent. Mozilla Cross-site Request Forgery flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel4.02.0.0.3-1vulnerable
Debianiceweasel4.02.0.0.3-2vulnerable
Debianiceweasel4.02.0.0.4-0etch1vulnerable
Debianiceweasel4.02.0.0.4-1vulnerable
Debianiceweasel4.02.0.0.5-0etch1vulnerable
Debianiceweasel4.02.0.0.5-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.5-1vulnerable
Debianiceweasel4.02.0.0.5-2vulnerable
Debianiceweasel4.02.0.0.6+2.0.0.8-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1vulnerable
Debianiceweasel4.02.0.0.6-0etch1+lenny1vulnerable
Debianiceweasel4.02.0.0.6-1vulnerable
Debianiceweasel4.02.0.0.7-1vulnerable
Debianiceweasel4.02.0.0.7-2vulnerable
Debianiceweasel4.02.0.0.8-1vulnerable
Debianiceweasel4.02.0.0.9-1vulnerable
Debianiceweasel4.02.0.0.9-2vulnerable
Debianiceweasel4.02.0.0.10-0etch1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb4.02.0.0.10-0etch1Not reportedDSA-1424-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]