CVE-2007-3511

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mozilla FireFox是一款流行的开源WEB浏览器。 FireFox在处理文件上传时存在漏洞，恶意网站可能利用此漏洞获取用户系统上的文件。 Firefox没有正确地处理表单字段的焦点，允许攻击者通过OnKeyDown事件将焦点从textarea字段更改至file upload字段，如果用户访问了恶意站点并向textarea输入表单键入了文件名的话，就可能将系统上的任意文件上传到恶意站点。

CVE-2007-3511 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. Mozilla FireFox是一款流行的开源WEB浏览器。 FireFox在处理文件上传时存在漏洞，恶意网站可能利用此漏洞获取用户系统上的文件。 Firefox没有正确地处理表单字段的焦点，允许攻击者通过OnKeyDown事件将焦点从textarea字段更改至file upload字段，如果用户访问了恶意站点并向textarea输入表单键入了文件名的话，就 CVE-2007-3511 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2007-3511

I. Basic Information for CVE-2007-3511

Affected Products

II. Public POCs for CVE-2007-3511

III. Intelligence Information for CVE-2007-3511

Vendor Advisories for CVE-2007-3511 (34)

• http://www.mozilla.org/security/announce/2007/mfsa2007-32.html x_refsource_CONFIRM
• 🔗 Security update for Mozilla Firefox Read full article x_refsource_CONFIRM
• http://secunia.com/advisories/27335 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27327 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/25904 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27276 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27680 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27298 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27383 third-party-advisory x_refsource_SECUNIA
• http://osvdb.org/37994 vdb-entry x_refsource_OSVDB
• http://secunia.com/advisories/27387 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27325 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27480 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27356 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27336 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27403 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27425 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/24725 vdb-entry x_refsource_BID
• http://secunia.com/advisories/27414 third-party-advisory x_refsource_SECUNIA
• http://securitytracker.com/id?1018837 vdb-entry x_refsource_SECTRACK
• http://www.debian.org/security/2007/dsa-1396 vendor-advisory x_refsource_DEBIAN
• http://www.debian.org/security/2007/dsa-1401 vendor-advisory x_refsource_DEBIAN
• http://www.debian.org/security/2007/dsa-1392 vendor-advisory x_refsource_DEBIAN
• http://www.ubuntu.com/usn/usn-536-1 vendor-advisory x_refsource_UBUNTU
• https://usn.ubuntu.com/535-1/ vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2008/0083 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2007/3544 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2007/3587 vdb-entry x_refsource_VUPEN
• http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 vendor-advisory x_refsource_MANDRIVA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9763 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/482925/100/0/threaded mailing-list x_refsource_BUGTRAQ
• http://www.securityfocus.com/archive/1/482876/100/200/threaded mailing-list x_refsource_BUGTRAQ
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35299 vdb-entry x_refsource_XF
• http://www.securityfocus.com/archive/1/482932/100/200/threaded mailing-list x_refsource_BUGTRAQ

Mailing List Discussions for CVE-2007-3511 (2)

• http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0646.html mailing-list x_refsource_FULLDISC
• http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0658.html mailing-list x_refsource_FULLDISC

Other References for CVE-2007-3511 (11)

• http://yathong.googlepages.com/FirefoxFocusBug.html x_refsource_MISC
• http://sla.ckers.org/forum/read.php?3%2C13142 x_refsource_MISC
• https://issues.rpath.com/browse/RPL-1858 x_refsource_CONFIRM
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 vendor-advisory x_refsource_SUNALERT
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 vendor-advisory x_refsource_HP
• http://www.redhat.com/support/errata/RHSA-2007-0980.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2007-0979.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2007-0981.html vendor-advisory x_refsource_REDHAT
• https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html vendor-advisory x_refsource_FEDORA
• https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html vendor-advisory x_refsource_FEDORA
• https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html vendor-advisory x_refsource_FEDORA

• https://www.cve.org/CVERecord?id=CVE-2007-3511

Same Patch Batch · n/a · 2007-07-03 · 46 CVEs total

Showing top 20 of 46 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2007-3511