FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

firefox -- OnUnload Javascript browser entrapment vulnerability

Affected packages
	firefox	<	2.0.0.8,1
	linux-firefox	<	2.0.0.8
	linux-seamonkey	<	1.1.5
	seamonkey	<	1.1.5

Details

VuXML ID	e24797af-803d-11dc-b787-003048705d5a
Discovery	2007-10-19
Entry	2007-10-22
Modified	2007-10-23

RedHat reports:

Several flaws were found in the way in which Firefox displayed malformed web content. A web page containing specially-crafted content could potentially trick a user into surrendering sensitive information. (CVE-2007-1095, CVE-2007-3844, CVE-2007-3511, CVE-2007-5334)

[source]

References

CVE Name

CVE-2007-1095