Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2007-2870

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mozilla Firefox/SeaMonkey/Thunderbird都是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。攻击者可以利用addEventListener方式违背浏览器的同源策略向其他站点注入脚本，导致访问或修改该站点的保密或有价值的信息。

AI Predicted 6.5 Difficulty: Moderate EPSS 1.65% · P76 Updated Feb 27, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2007-2870

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site, which is executed in the context of that site.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Mozilla addEventListener方式远程拒绝服务攻击漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2007-2870

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2007-2870

请登录查看更多情报信息。

Vendor Advisories for CVE-2007-2870 (29)

http://www.mozilla.org/security/announce/2007/mfsa2007-16.html x_refsource_CONFIRM
http://osvdb.org/35136 vdb-entry x_refsource_OSVDB
http://secunia.com/advisories/25685 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25490 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25491 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25534 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25750 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25533 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25476 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25858 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25559 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25647 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/24242 vdb-entry x_refsource_BID
http://secunia.com/advisories/25488 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25469 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25635 third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1018161 vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1018160 vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2007/dsa-1300 vendor-advisory x_refsource_DEBIAN
http://www.debian.org/security/2007/dsa-1308 vendor-advisory x_refsource_DEBIAN
🔗 [SECURITY] [DSA 1306-1] New xulrunner packages fix several vulnerabilities Read full article vendor-advisory x_refsource_DEBIAN
http://www.us-cert.gov/cas/techalerts/TA07-151A.html third-party-advisory x_refsource_CERT
http://www.vupen.com/english/advisories/2007/1994 vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 vendor-advisory x_refsource_MANDRIVA
http://security.gentoo.org/glsa/glsa-200706-06.xml vendor-advisory x_refsource_GENTOO
http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 vendor-advisory x_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9547 vdb-entry signature x_refsource_OVAL
http://www.securityfocus.com/archive/1/470172/100/200/threaded mailing-list x_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/34614 vdb-entry x_refsource_XF

Other References for CVE-2007-2870 (6)

https://issues.rpath.com/browse/RPL-1424 x_refsource_CONFIRM
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 vendor-advisory x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2007-0402.html vendor-advisory x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0400.html vendor-advisory x_refsource_REDHAT
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 vendor-advisory x_refsource_SLACKWARE
http://www.novell.com/linux/security/advisories/2007_36_mozilla.html vendor-advisory x_refsource_SUSE

https://www.cve.org/CVERecord?id=CVE-2007-2870

Same Patch Batch · n/a · 2007-06-01 · 31 CVEs total

CVE-2007-2974		Avira Antivir中.LZH文件时存在缓冲区溢出漏洞
CVE-2007-2871		Mozilla XUL 地址栏拒绝服务攻击漏洞
CVE-2007-2869		Mozilla 表单字符远程拒绝服务攻击漏洞
CVE-2007-2868		Mozilla JavaScript引擎远程拒绝服务攻击漏洞
CVE-2007-2867		Mozilla Web页面表单远程拒绝服务漏洞
CVE-2007-1362		Mozilla cookie远程拒绝服务攻击漏洞
CVE-2007-0328		Macrovision FLEXnet Connect软件DWUpdateService控件不安全函数调用漏洞
CVE-2007-2982		British Telecommunications Webhelper ctiveX控件多个缓冲区溢出漏洞
CVE-2007-2981		LEADTOOLS LEAD Raster OCR文档对象库ActiveX控件远程栈溢出漏洞
CVE-2007-2980		LeadTools Raster ISIS对象LTRIS14e.DLL控件远程堆溢出漏洞
CVE-2007-2979		Techno Dreams Web Directory / Search Engine 安全跳过和数据库下载漏洞
CVE-2007-2978		eggblog PHPSESSID参数 web会话劫持漏洞
CVE-2007-2977		DOMjudge 'submitcommon.c'文件缓冲区溢出漏洞
CVE-2007-2976		Centrinity FirstClass %00无效字符跨站脚本攻击漏洞
CVE-2007-2975		Ignite Realtime Openfire管理控制台权限提升漏洞
CVE-2007-2984		Media Technology Group CDPass ActiveX控件栈缓冲区溢出漏洞
CVE-2007-2973		Avira Antivir中存在TAR文件拒绝服务漏洞
CVE-2007-2972		Avira Antivir中UPX压缩文件存在拒绝服务漏洞
CVE-2007-2971		gCards 'getnewsitem.php' SQL注入漏洞
CVE-2007-2970		8e6 R3000 'block.cgi' 跨站脚本攻击漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2007-2870

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2007-2870

Quick assessment

I. Basic Information for CVE-2007-2870

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2007-2870

III. Intelligence Information for CVE-2007-2870

Vendor Advisories for CVE-2007-2870 (29)

Other References for CVE-2007-2870 (6)

Same Patch Batch · n/a · 2007-06-01 · 31 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2007-2870

Leave a comment