PT-2007-4175 · Mozilla+1 · Firefox+2
Chris Thomas
·
Publicado
2007-05-31
·
Atualizado
2018-10-16
·
CVE-2007-2871
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 1.5.x through 1.5.0.11
Mozilla Firefox versions 2.x through 2.0.0.3
SeaMonkey version 1.0.9
SeaMonkey version 1.1.2
Description
The issue allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. This can be leveraged for phishing and other attacks.
Recommendations
For Mozilla Firefox versions 1.5.x through 1.5.0.11, update to version 1.5.0.12 or later.
For Mozilla Firefox versions 2.x through 2.0.0.3, update to version 2.0.0.4 or later.
For SeaMonkey version 1.0.9, update to a version later than 1.0.9.
For SeaMonkey version 1.1.2, update to a version later than 1.1.2.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Red Hat
Seamonkey