Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    1 vulnerability by Ichiro Maruta

    JVNDB-2007-000779

    Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00
    Severity
    N/A (UNKNOWN) - -
    Summary
    MouseoverDictionary vulnerable to arbitrary script execution
    Details
    MouseoverDictionary, an add-on for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an arbitrary script. MouseoverDictionary, an add-on mouseover English-Japanese dictionary for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an arbitrary script on the user's web browser as it does not handle the sidebar HTML page properly.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000779.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "MouseoverDictionary, an add-on for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an arbitrary script.\r\n\r\nMouseoverDictionary, an add-on mouseover English-Japanese dictionary for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an arbitrary script on the user\u0027s web browser as it does not handle the sidebar HTML page properly.",
  "link": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000779.html",
  "sec:cpe": {
    "#text": "cpe:/a:itirou_maruta:mouseoverdictionary",
    "@product": "MouseoverDictionary",
    "@vendor": "Ichiro Maruta",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.8",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2007-000779",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN63304072/index.html",
      "@id": "JVN#63304072",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5459",
      "@id": "CVE-2007-5459",
      "@source": "CVE"
    },
    {
      "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5459",
      "@id": "CVE-2007-5459",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27195/",
      "@id": "SA27195",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/26053",
      "@id": "26053",
      "@source": "BID"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/37184",
      "@id": "37184",
      "@source": "XF"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "MouseoverDictionary vulnerable to arbitrary script execution"
}