VULNERABILITY INTELLIGENCE
CVE-2007-3656
CVSS score6.8 MEDIUM
EPSS probability1.97%
CISA KEVNot currently listed
Published2007-07-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor