Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ja-linux-netscapeUpgrade netscape7Upgrade ja-netscape7Upgrade ja-linux-mozillafirebird-gtk1Upgrade ja-mozillafirebird-gtk2Upgrade linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade mozilla-thunderbirdUpgrade mozilla-gtkUpgrade ru-linux-mozillafirebirdUpgrade firefoxUpgrade el-linux-mozillafirebirdUpgrade mozillaUpgrade mozilla-firebirdUpgrade linux-mozilla-develUpgrade linux-netscapeUpgrade fr-netscape7Upgrade phoenixUpgrade linux-phoenixUpgrade mozilla-embeddedUpgrade mozilla-gtk1Upgrade linux-firefoxUpgrade mozilla+ipv6Upgrade pt_BR-netscape7Upgrade fr-linux-netscapeUpgrade zhTW-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade mozilla-gtk2Upgrade linux-mozillaUpgrade de-linux-netscapeUpgrade de-netscape7 | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-jaUpgrade mozilla-browserUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox | Nov 8, 2024 | Jul 13, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub