PT-2007-4175 · Mozilla+1 · Firefox+2
Chris Thomas
·
Published
2007-05-31
·
Updated
2018-10-16
·
CVE-2007-2871
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 1.5.x through 1.5.0.11
Mozilla Firefox versions 2.x through 2.0.0.3
SeaMonkey version 1.0.9
SeaMonkey version 1.1.2
Description
The issue allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. This can be leveraged for phishing and other attacks.
Recommendations
For Mozilla Firefox versions 1.5.x through 1.5.0.11, update to version 1.5.0.12 or later.
For Mozilla Firefox versions 2.x through 2.0.0.3, update to version 2.0.0.4 or later.
For SeaMonkey version 1.0.9, update to a version later than 1.0.9.
For SeaMonkey version 1.1.2, update to a version later than 1.1.2.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Firefox
Red Hat
Seamonkey