PT-2004-1798 · Netscape+1 · Netscape+3

Jesse Ruderman · Published 2004-07-23 · Updated 2017-10-11 · CVE-2004-0718

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla versions 1.6 Firebird versions 0.7 Firefox versions 0.8 Netscape versions 7.1

Description The issue allows a frame in one domain to inject content into a frame that belongs to another domain, which can facilitate web site spoofing and other attacks.

Recommendations For Mozilla version 1.6, update to a version that includes a fix for this issue. For Firebird version 0.7, update to a version that includes a fix for this issue. For Firefox version 0.8, update to a version that includes a fix for this issue. For Netscape version 7.1, update to a version that includes a fix for this issue.

Fix

Related Identifiers

CVE-2004-0718

DSA-775-1

DSA-777-1

DSA-810-1

DTSA-14-1

DTSA-7-1

DTSA-8-2

Affected Products

Firebird

Firefox

Mozilla Firefox

Netscape

References · 15

• http://mandriva.com/security/advisories?name=MDKSA-2004:082 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0718 · Security Note
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt · Vendor Advisory
• http://marc.info/?l=bugtraq&m=109900315219363&w=2 · Vendor Advisory
• http://secunia.com/multiple_browsers_frame_injection_vulnerability_test · Vendor Advisory
• http://secunia.com/advisories/11978 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-421.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2004_36_mozilla.html · Vendor Advisory
• http://debian.org/security/2005/dsa-810 · Vendor Advisory
• http://debian.org/security/2005/dsa-777 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9997 · Note
• http://bugzilla.mozilla.org/show_bug.cgi?id=246448 · Note
• http://securityfocus.com/bid/15495 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4756 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1598 · Note