--- title: "CVE-2007-3656\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2007-3656?format=md keywords: index, follow --- # CVE-2007-3656 Publication date 10 July 2007 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 7.04 feisty | Fixed 2.0.0.6+1-0ubuntu1 | | 6.10 edgy | Fixed 2.0.0.6+0dfsg-0ubuntu0.6.10 | | 6.06 LTS dapper | Fixed 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1 | | iceape | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | midbrowser | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3656) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2007-3656) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2007-3656) * [Debian](https://security-tracker.debian.org/tracker/CVE-2007-3656) ### Related Ubuntu Security Notices (USN) + [USN-490-1](https://usn.ubuntu.com/USN-490-1) + Firefox vulnerabilities + 20 July 2007 ### Other references *