CVE ID:	CVE-2007-3511
Description:	The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.
Test IDs:	1.3.6.1.4.1.25623.1.0.58732   1.3.6.1.4.1.25623.1.0.58695   1.3.6.1.4.1.25623.1.0.59840   1.3.6.1.4.1.25623.1.0.58689   1.3.6.1.4.1.25623.1.0.59819
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3511 BugTraq ID: 24725 http://www.securityfocus.com/bid/24725 Bugtraq: 20071026 rPSA-2007-0225-1 firefox (Google Search) http://www.securityfocus.com/archive/1/482876/100/200/threaded Bugtraq: 20071029 FLEA-2007-0062-1 firefox (Google Search) http://www.securityfocus.com/archive/1/482925/100/0/threaded Bugtraq: 20071029 rPSA-2007-0225-2 firefox thunderbird (Google Search) http://www.securityfocus.com/archive/1/482932/100/200/threaded Debian Security Information: DSA-1392 (Google Search) http://www.debian.org/security/2007/dsa-1392 Debian Security Information: DSA-1396 (Google Search) http://www.debian.org/security/2007/dsa-1396 Debian Security Information: DSA-1401 (Google Search) http://www.debian.org/security/2007/dsa-1401 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0646.html http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0658.html HPdes Security Advisory: HPSBUX02153 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 HPdes Security Advisory: SSRT061181 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 http://sla.ckers.org/forum/read.php?3,13142 http://yathong.googlepages.com/FirefoxFocusBug.html http://osvdb.org/37994 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9763 RedHat Security Advisories: RHSA-2007:0979 http://www.redhat.com/support/errata/RHSA-2007-0979.html RedHat Security Advisories: RHSA-2007:0980 http://www.redhat.com/support/errata/RHSA-2007-0980.html RedHat Security Advisories: RHSA-2007:0981 http://www.redhat.com/support/errata/RHSA-2007-0981.html http://securitytracker.com/id?1018837 http://secunia.com/advisories/25904 http://secunia.com/advisories/27276 http://secunia.com/advisories/27298 http://secunia.com/advisories/27325 http://secunia.com/advisories/27327 http://secunia.com/advisories/27335 http://secunia.com/advisories/27336 http://secunia.com/advisories/27356 http://secunia.com/advisories/27383 http://secunia.com/advisories/27387 http://secunia.com/advisories/27403 http://secunia.com/advisories/27414 http://secunia.com/advisories/27425 http://secunia.com/advisories/27480 http://secunia.com/advisories/27680 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 SuSE Security Announcement: SUSE-SA:2007:057 (Google Search) http://www.novell.com/linux/security/advisories/2007_57_mozilla.html https://usn.ubuntu.com/535-1/ http://www.ubuntu.com/usn/usn-536-1 http://www.vupen.com/english/advisories/2007/3544 http://www.vupen.com/english/advisories/2007/3587 http://www.vupen.com/english/advisories/2008/0083 XForce ISS Database: firefox-focus-security-bypass(35299) https://exchange.xforce.ibmcloud.com/vulnerabilities/35299