Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade el-linux-mozillafirebirdUpgrade linux-netscapeUpgrade mozilla-gtk1Upgrade mozilla+ipv6Upgrade de-linux-netscapeUpgrade zhTW-linux-mozillafirebirdUpgrade linux-mozilla-develUpgrade kdebaseUpgrade firefoxUpgrade linux-phoenixUpgrade ru-linux-mozillafirebirdUpgrade kdelibsUpgrade ja-linux-mozillafirebird-gtk1Upgrade operaUpgrade opera-develUpgrade linux-mozillaUpgrade netscape7Upgrade ja-linux-netscapeUpgrade mozilla-gtkUpgrade mozilla-gtk2Upgrade fr-linux-netscapeUpgrade mozilla-thunderbirdUpgrade fr-netscape7Upgrade mozilla-firebirdUpgrade phoenixUpgrade de-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade pt_BR-netscape7Upgrade ja-netscape7Upgrade mozilla-embeddedUpgrade linux-operaUpgrade de-netscape7Upgrade mozilla | Dec 10, 2025 | Jan 24, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla.Upgrade www-client/mozilla-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Dec 31, 2004 |
| Mfsa2005 13 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 1.0.1 | Jul 28, 2005 | Dec 31, 2004 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-trUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-uk | Nov 8, 2024 | Dec 31, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub