CVE-2007-0995 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2007-0995 Interim 1 17 2025-11-05T06:22:44Z current 2021-05-30T12:38:01Z 2025-11-05T06:22:44Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2007-0995 Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S32CD3CP3UN6UJWY7ANEKAS6GVBYXHU2/#S32CD3CP3UN6UJWY7ANEKAS6GVBYXHU2 E-Mail link for SUSE-SA:2007:019 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GSACUWXOTYI2HT5IHOBIDS6RBK2VLAFE/#GSACUWXOTYI2HT5IHOBIDS6RBK2VLAFE E-Mail link for SUSE-SA:2007:022 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/ E-Mail link for openSUSE-SU-2024:14572-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 6 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 11 SP4 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-10.0-0.3.2 MozillaFirefox-140.2.0-160000.1.2 MozillaFirefox-17.0.4esr-0.10.42 MozillaFirefox-3.5.9-0.1.1 MozillaFirefox-31.7.0esr-0.8.1 MozillaFirefox-92.0-1.2 MozillaFirefox-branding-upstream-92.0-1.2 MozillaFirefox-devel-140.2.0-160000.1.2 MozillaFirefox-devel-31.7.0esr-0.8.1 MozillaFirefox-devel-92.0-1.2 MozillaFirefox-translations-10.0-0.3.2 MozillaFirefox-translations-17.0.4esr-0.10.42 MozillaFirefox-translations-3.5.9-0.1.1 MozillaFirefox-translations-31.7.0esr-0.8.1 MozillaFirefox-translations-common-140.2.0-160000.1.2 MozillaFirefox-translations-common-92.0-1.2 MozillaFirefox-translations-other-140.2.0-160000.1.2 MozillaFirefox-translations-other-92.0-1.2 firefox-esr-128.5.1-1.1 firefox-esr-branding-upstream-128.5.1-1.1 firefox-esr-translations-common-128.5.1-1.1 firefox-esr-translations-other-128.5.1-1.1 MozillaFirefox-3.5.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 MozillaFirefox-translations-3.5.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 MozillaFirefox-10.0-0.3.2 as a component of SUSE Linux Enterprise Server 11 SP2 MozillaFirefox-translations-10.0-0.3.2 as a component of SUSE Linux Enterprise Server 11 SP2 MozillaFirefox-17.0.4esr-0.10.42 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-translations-17.0.4esr-0.10.42 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 MozillaFirefox-translations-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 MozillaFirefox-140.2.0-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-devel-140.2.0-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-translations-common-140.2.0-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-translations-other-140.2.0-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-devel-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 MozillaFirefox-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-devel-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-92.0-1.2 as a component of openSUSE Tumbleweed firefox-esr-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-branding-upstream-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-common-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-other-128.5.1-1.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE Enterprise Storage 6 Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions. CVE-2007-0995 SUSE Linux Enterprise Server 11 SP1:MozillaFirefox-3.5.9-0.1.1 SUSE Linux Enterprise Server 11 SP1:MozillaFirefox-translations-3.5.9-0.1.1 SUSE Linux Enterprise Server 11 SP2:MozillaFirefox-10.0-0.3.2 SUSE Linux Enterprise Server 11 SP2:MozillaFirefox-translations-10.0-0.3.2 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-17.0.4esr-0.10.42 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-17.0.4esr-0.10.42 SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 16.0:MozillaFirefox-140.2.0-160000.1.2 SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-140.2.0-160000.1.2 SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-140.2.0-160000.1.2 SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-140.2.0-160000.1.2 SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-31.7.0esr-0.8.1 openSUSE Tumbleweed:MozillaFirefox-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-devel-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-translations-common-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-translations-other-92.0-1.2 openSUSE Tumbleweed:firefox-esr-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-branding-upstream-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-common-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-other-128.5.1-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N