Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade seamonkey-develUpgrade seamonkey-js-debuggerUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade nspr-develUpgrade nsprUpgrade seamonkey-chatUpgrade firefox | Dec 1, 2016 | Aug 3, 2009 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Aug 3, 2009 |
| Mfsa2009 44 | — | Upgrade to Mozilla Firefox version 3.5.2Upgrade to Mozilla Firefox version 3.0.13 | Jun 14, 2012 | Aug 3, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-develUpgrade nspr-develUpgrade xulrunner-devel-unstableUpgrade nspr | Oct 16, 2024 | Aug 3, 2009 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade gconf2-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nss-32bitUpgrade orbit2Upgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2-32bitUpgrade libidlUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-x86Upgrade gconf2Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-x86Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade libidl-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libidl-x86Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-x86Upgrade libfreebl3Upgrade mozilla-nsprUpgrade libfreebl3-x86Upgrade mozilla-nssUpgrade MozillaFirefox-translationsUpgrade orbit2-x86Upgrade mozilla-xulrunner190-x86Upgrade gconf2-32bitUpgrade mozilla-xulrunner192 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9 | Nov 8, 2024 | Aug 3, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub