A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718.
CVSS Details
- CVSS 3.1 Base Score: 3.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade netscape7Upgrade mozillaUpgrade de-netscape7Upgrade de-linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade zhCN-linux-mozillafirebirdUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla-gtk2Upgrade mozilla-thunderbirdUpgrade mozilla-gtk1Upgrade ja-linux-netscapeUpgrade ja-netscape7Upgrade fr-netscape7Upgrade linux-mozillaUpgrade pt_BR-netscape7Upgrade linux-firefoxUpgrade linux-mozilla-develUpgrade linux-netscapeUpgrade mozilla+ipv6Upgrade firefoxUpgrade mozilla-firebirdUpgrade phoenixUpgrade ja-linux-mozillafirebird-gtk1Upgrade linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade ja-mozillafirebird-gtk2Upgrade ru-linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade el-linux-mozillafirebirdUpgrade mozilla-gtkUpgrade linux-phoenix | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefoxUpgrade mozilla-firefox-locale-jaUpgrade mozilla-browserUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-nb | Nov 8, 2024 | Jun 14, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub