CVE ID:	CVE-2007-3656
Description:	Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.
Test IDs:	1.3.6.1.4.1.25623.1.0.59753   1.3.6.1.4.1.25623.1.0.58470   1.3.6.1.4.1.25623.1.0.59752   1.3.6.1.4.1.25623.1.0.59758   1.3.6.1.4.1.25623.1.0.58471   1.3.6.1.4.1.25623.1.0.59750   1.3.6.1.4.1.25623.1.0.58469   1.3.6.1.4.1.25623.1.0.59759
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3656 BugTraq ID: 24831 http://www.securityfocus.com/bid/24831 Bugtraq: 20070709 Firefox wyciwyg:// cache zone bypass (Google Search) http://www.securityfocus.com/archive/1/473191/100/0/threaded Bugtraq: 20070720 rPSA-2007-0148-1 firefox thunderbird (Google Search) http://www.securityfocus.com/archive/1/474226/100/0/threaded Bugtraq: 20070724 FLEA-2007-0033-1: firefox thunderbird (Google Search) http://www.securityfocus.com/archive/1/474542/100/0/threaded Debian Security Information: DSA-1337 (Google Search) http://www.debian.org/security/2007/dsa-1337 Debian Security Information: DSA-1338 (Google Search) http://www.debian.org/security/2007/dsa-1338 Debian Security Information: DSA-1339 (Google Search) http://www.debian.org/security/2007/dsa-1339 http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml HPdes Security Advisory: HPSBUX02153 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 HPdes Security Advisory: SSRT061181 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 http://lcamtuf.coredump.cx/ffcache/ http://osvdb.org/38028 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9105 RedHat Security Advisories: RHSA-2007:0722 http://www.redhat.com/support/errata/RHSA-2007-0722.html RedHat Security Advisories: RHSA-2007:0724 http://www.redhat.com/support/errata/RHSA-2007-0724.html http://www.securitytracker.com/id?1018411 http://secunia.com/advisories/25589 http://secunia.com/advisories/25990 http://secunia.com/advisories/26072 http://secunia.com/advisories/26103 http://secunia.com/advisories/26107 http://secunia.com/advisories/26149 http://secunia.com/advisories/26151 http://secunia.com/advisories/26159 http://secunia.com/advisories/26179 http://secunia.com/advisories/26204 http://secunia.com/advisories/26205 http://secunia.com/advisories/26211 http://secunia.com/advisories/26216 http://secunia.com/advisories/26258 http://secunia.com/advisories/26271 http://secunia.com/advisories/26460 http://secunia.com/advisories/28135 SGI Security Advisory: 20070701-01-P ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc http://securityreason.com/securityalert/2872 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 SuSE Security Announcement: SUSE-SA:2007:049 (Google Search) http://www.novell.com/linux/security/advisories/2007_49_mozilla.html http://www.ubuntu.com/usn/usn-490-1 http://www.vupen.com/english/advisories/2007/4256 XForce ISS Database: mozilla-wyciwyg-security-bypass(35298) https://exchange.xforce.ibmcloud.com/vulnerabilities/35298