CVE-2007-1084

CVE-2007-1084 describes a vulnerability in Mozilla Firefox 2.0.0.1 and earlier where the browser fails to prompt users before saving bookmarklets. This oversight allows remote attackers to bypass the same-domain policy by deceiving a user into saving a malicious bookmarklet using a data: scheme. The saved bookmarklet, when executed, runs in the context of the last visited web page, potentially leading to information disclosure, unauthorized modification, or denial of service. The vulnerability has a CVSS score of 6.8, indicating a medium severity with network access, medium attack complexity, and partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, no known exploit code available in common databases like Metasploit or ExploitDB, and minimal community discussion or media coverage.