{"api_version":"1","generated_at":"2026-07-23T09:17:19+00:00","cve":"CVE-2007-3144","urls":{"html":"https://cve.report/CVE-2007-3144","api":"https://cve.report/api/cve/CVE-2007-3144.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-3144","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-3144"},"summary":{"title":"CVE-2007-3144","description":"Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-06-11 18:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.4","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://osvdb.org/43466","name":"http://osvdb.org/43466","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.0x000000.com/?i=334","name":"http://www.0x000000.com/?i=334","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"H Tech Blog | Hack and Evolve Faster with the Common Techniques","mime":"text/html","httpstatus":"200","archivestatus":"403"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34983","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34983","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://testing.bitsploit.de/test.html","name":"http://testing.bitsploit.de/test.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/24352","name":"http://www.securityfocus.com/bid/24352","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Opera Web Browser Basic Authentication Server Domain Spoofing Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-3144","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3144","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"3144","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"mozilla","cpe6":"1.7.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2007-3144","organization":"Red Hat","lastmodified":"2007-08-16","contributor":"Mark J Cox","statementText":"Not vulnerable. Mozilla is no longer shipped as part of any version of Red Hat Enterprise Linux. Mozilla was replaced by SeaMonkey in Red Hat Enterprise Linux by SeaMonkey which is not affected by this issue.","cve_year":"2007","cve_id":"3144","crc32":"d897fd27"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T14:05:28.585Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"24352","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/24352"},{"name":"43466","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/43466"},{"name":"multiple-basic-authentication-spoofing(34983)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34983"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://testing.bitsploit.de/test.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.0x000000.com/?i=334"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-06-06T00:00:00.000Z","descriptions":[{"lang":"en","value":"Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"24352","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/24352"},{"name":"43466","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/43466"},{"name":"multiple-basic-authentication-spoofing(34983)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34983"},{"tags":["x_refsource_MISC"],"url":"http://testing.bitsploit.de/test.html"},{"tags":["x_refsource_MISC"],"url":"http://www.0x000000.com/?i=334"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-3144","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"24352","refsource":"BID","url":"http://www.securityfocus.com/bid/24352"},{"name":"43466","refsource":"OSVDB","url":"http://osvdb.org/43466"},{"name":"multiple-basic-authentication-spoofing(34983)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34983"},{"name":"http://testing.bitsploit.de/test.html","refsource":"MISC","url":"http://testing.bitsploit.de/test.html"},{"name":"http://www.0x000000.com/?i=334","refsource":"MISC","url":"http://www.0x000000.com/?i=334"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-3144","datePublished":"2007-06-11T18:00:00.000Z","dateReserved":"2007-06-11T00:00:00.000Z","dateUpdated":"2024-08-07T14:05:28.585Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-06-11 18:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.12:*:*:*:*:*:*:*","matchCriteriaId":"A2BD8D89-4936-402C-973D-5F4B071806D5"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"3144","Ordinal":"1","Title":"CVE-2007-3144","CVE":"CVE-2007-3144","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"3144","Ordinal":"1","NoteData":"Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.","Type":"Description","Title":"CVE-2007-3144"},{"CveYear":"2007","CveId":"3144","Ordinal":"2","NoteData":"2007-06-11","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"3144","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}