PT-2004-2120 · Mozilla+1 · Firefox+2

Publicado 2004-12-10 · Atualizado 2017-10-11 · CVE-2004-1156

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Mozilla versions prior to 1.7.6 Firefox versions prior to 1.0.1

Description: The issue allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain. This can be demonstrated using a pop-up window on a trusted web site.

Recommendations: For Mozilla versions prior to 1.7.6, update to version 1.7.6 or later. For Firefox versions prior to 1.0.1, update to version 1.0.1 or later.

Correção

Identificadores relacionados

CVE-2004-1156

RHSA-2005:176

RHSA-2005_176

RHSA-2005_384

Produtos afetados

Firefox

Mozilla Firefox

Red Hat

Referências · 61

• https://redhat.com/security/data/cve/CVE-2005-0590.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0989.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0233.html · Nota
• http://shmoo.com/idn/homograph.txt · Nota
• https://redhat.com/security/data/cve/CVE-2005-0588.html · Nota
• http://secunia.com/multiple_browsers_window_injection_vulnerability_test · Nota
• http://mikx.de/firespoofing · Nota
• http://securitytracker.com/id?1013635 · Nota
• http://mikx.de/firelinking · Nota
• http://mozilla.org/security/announce/mfsa2005-13.html · Nota
• https://redhat.com/security/data/cve/CVE-2004-1156.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0578.html · Nota
• http://securitytracker.com/id?1013301 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100045 · Nota
• http://secunia.com/advisories/14820 · Nota