Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-firebirdUpgrade pt_BR-netscape7Upgrade zhCN-linux-mozillafirebirdUpgrade phoenixUpgrade ja-netscape7Upgrade de-linux-mozillafirebirdUpgrade linux-mozilla-develUpgrade linux-netscapeUpgrade ja-mozillafirebird-gtk2Upgrade de-netscape7Upgrade operaUpgrade linux-operaUpgrade ja-linux-netscapeUpgrade fr-linux-netscapeUpgrade mozilla-gtk2Upgrade mozilla-gtk1Upgrade linux-mozillaUpgrade fr-netscape7Upgrade mozilla-thunderbirdUpgrade mozilla-gtkUpgrade mozillaUpgrade ja-linux-mozillafirebird-gtk1Upgrade netscape7Upgrade kdelibsUpgrade mozilla+ipv6Upgrade kdebaseUpgrade mozilla-embeddedUpgrade firefoxUpgrade de-linux-netscapeUpgrade opera-develUpgrade linux-mozillafirebirdUpgrade el-linux-mozillafirebirdUpgrade ru-linux-mozillafirebirdUpgrade linux-phoenixUpgrade zhTW-linux-mozillafirebird | Dec 10, 2025 | Jan 24, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub