Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade netscape7Upgrade linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade linux-phoenixUpgrade ru-linux-mozillafirebirdUpgrade kdelibsUpgrade opera-develUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla+ipv6Upgrade de-linux-netscapeUpgrade firefoxUpgrade ja-linux-mozillafirebird-gtk1Upgrade el-linux-mozillafirebirdUpgrade kdebaseUpgrade ja-linux-netscapeUpgrade zhCN-linux-mozillafirebirdUpgrade mozilla-gtk2Upgrade mozillaUpgrade mozilla-gtk1Upgrade mozilla-firebirdUpgrade linux-mozillaUpgrade phoenixUpgrade fr-linux-netscapeUpgrade de-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade operaUpgrade linux-mozilla-develUpgrade linux-operaUpgrade ja-mozillafirebird-gtk2Upgrade fr-netscape7Upgrade linux-netscapeUpgrade mozilla-thunderbirdUpgrade mozilla-gtkUpgrade ja-netscape7Upgrade de-netscape7 | Dec 10, 2025 | Jan 24, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub