CVE-2007-5335 - Vulnerability Details - OpenCVE

Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00859.

Key SSVC decision points have not yet been added.

Vendors	Products
Mozilla Subscribe	Firefox Subscribe

Configuration 1 [-]

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2007-5314	Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs.
Ubuntu USN	USN-535-1	Firefox vulnerabilities

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/42470
http://secunia.com/advisories/27335
http://secunia.com/advisories/27387
http://secunia.com/advisories/27665
http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
https://bugzilla.mozilla.org/show_bug.cgi?id=390983
https://exchange.xforce.ibmcloud.com/vulnerabilities/37428
https://usn.ubuntu.com/535-1/
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2007-10-24T00:00:00

Updated: 2024-08-07T15:24:42.479Z

Reserved: 2007-10-10T00:00:00

Link: CVE-2007-5335

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-10-24T00:46:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-5335

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-200

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-10-18T00:00:00", "descriptions": [{"lang": "en", "value": "Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-03T20:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "GLSA-200711-14", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=390983"}, {"name": "USN-535-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "https://usn.ubuntu.com/535-1/"}, {"name": "27387", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27387"}, {"name": "firefox-addmicrosummary-info-disclosure(37428)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37428"}, {"name": "27665", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27665"}, {"name": "27335", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27335"}, {"name": "FEDORA-2007-2664", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html"}, {"name": "42470", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/42470"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2007-5335", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "GLSA-200711-14", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml"}, {"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=390983", "refsource": "CONFIRM", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=390983"}, {"name": "USN-535-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/535-1/"}, {"name": "27387", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27387"}, {"name": "firefox-addmicrosummary-info-disclosure(37428)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37428"}, {"name": "27665", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27665"}, {"name": "27335", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27335"}, {"name": "FEDORA-2007-2664", "refsource": "FEDORA", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html"}, {"name": "42470", "refsource": "OSVDB", "url": "http://osvdb.org/42470"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:24:42.479Z"}, "title": "CVE Program Container", "references": [{"name": "GLSA-200711-14", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=390983"}, {"name": "USN-535-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "https://usn.ubuntu.com/535-1/"}, {"name": "27387", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27387"}, {"name": "firefox-addmicrosummary-info-disclosure(37428)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37428"}, {"name": "27665", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27665"}, {"name": "27335", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27335"}, {"name": "FEDORA-2007-2664", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html"}, {"name": "42470", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/42470"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2007-5335", "datePublished": "2007-10-24T00:00:00", "dateReserved": "2007-10-10T00:00:00", "dateUpdated": "2024-08-07T15:24:42.479Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "matchCriteriaId": "5A383873-7B11-41FA-A64D-8526370456F0", "versionEndIncluding": "2.0.0.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs."}, {"lang": "es", "value": "Mozilla Firefox 2.0 anterior a 2.0.0.8 permite a atacantes remotos obtener informaci\u00f3n sensible del sistema a trav\u00e9s de la utilizaci\u00f3n del m\u00e9todo sidebar addMicrosummaryGenerator en el acceso de archivo: URIs."}], "id": "CVE-2007-5335", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-10-24T00:46:00.000", "references": [{"source": "secalert@redhat.com", "url": "http://osvdb.org/42470"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/27335"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/27387"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/27665"}, {"source": "secalert@redhat.com", "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=390983"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37428"}, {"source": "secalert@redhat.com", "url": "https://usn.ubuntu.com/535-1/"}, {"source": "secalert@redhat.com", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/42470"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/27335"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/27387"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/27665"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=390983"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37428"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://usn.ubuntu.com/535-1/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}