CVE ID:	CVE-2007-0994
Description:	A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.
Test IDs:	1.3.6.1.4.1.25623.1.0.58468
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0994 1017726 http://securitytracker.com/id?1017726 20070202-01-P ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc 20070301-01-P ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc 22826 http://www.securityfocus.com/bid/22826 24384 http://secunia.com/advisories/24384 24395 http://secunia.com/advisories/24395 24455 http://secunia.com/advisories/24455 24457 http://secunia.com/advisories/24457 24650 http://secunia.com/advisories/24650 25588 http://secunia.com/advisories/25588 ADV-2007-0823 http://www.vupen.com/english/advisories/2007/0823 DSA-1336 http://www.debian.org/security/2007/dsa-1336 HPSBUX02153 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 RHSA-2007:0078 http://www.redhat.com/support/errata/RHSA-2007-0078.html RHSA-2007:0097 http://www.redhat.com/support/errata/RHSA-2007-0097.html SSA:2007-066-03 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 SSA:2007-066-05 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 SSRT061181 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 SUSE-SA:2007:019 http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html SUSE-SA:2007:022 http://www.novell.com/linux/security/advisories/2007_22_mozilla.html http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733 http://www.mozilla.org/security/announce/2007/mfsa2007-09.html http://www.mozilla.org/security/announce/2007/mfsa2007-09.html https://issues.rpath.com/browse/RPL-1103 https://issues.rpath.com/browse/RPL-1103 oval:org.mitre.oval:def:9749 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749