PT-2007-2227 · Mozilla+1 · Firefox+2

Published 2007-02-23 · Updated 2018-10-16 · CVE-2007-0779

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.5.x through 1.5.0.9 Mozilla Firefox versions 2.x through 2.0.0.1 SeaMonkey versions prior to 1.0.8

Description The issue allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor. This can lead to GUI overlay attacks.

Recommendations For Mozilla Firefox versions 1.5.x through 1.5.0.9, update to version 1.5.0.10 or later. For Mozilla Firefox versions 2.x through 2.0.0.1, update to version 2.0.0.2 or later. For SeaMonkey versions prior to 1.0.8, update to version 1.0.8 or later.

Fix

Related Identifiers

CVE-2007-0779

HPSBUX02153

RHSA-2007:0077

RHSA-2007:0078

RHSA-2007:0079

RHSA-2007:0097

RHSA-2007:0108

RHSA-2007_0077

RHSA-2007_0078

RHSA-2007_0079

RHSA-2007_0097

RHSA-2007_0108

Affected Products

Firefox

Red Hat

Seamonkey

References · 203

• http://mozilla.org/security/announce/2007/mfsa2007-04.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3811 · Security Note
• http://secunia.com/advisories/24455 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3656 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1727 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3809 · Security Note
• http://secunia.com/advisories/24293 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6589 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1942 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2869 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0108.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0779 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6501 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3807 · Security Note