Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade zhTW-linux-mozillafirebirdUpgrade fr-netscape7Upgrade pt_BR-netscape7Upgrade de-linux-netscapeUpgrade linux-netscapeUpgrade linux-mozillaUpgrade zhCN-linux-mozillafirebirdUpgrade de-netscape7Upgrade fr-linux-netscapeUpgrade mozilla-gtk2Upgrade phoenixUpgrade linux-phoenixUpgrade mozilla+ipv6Upgrade mozilla-gtk1Upgrade de-linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade ja-linux-mozillafirebird-gtk1Upgrade mozilla-gtkUpgrade ja-netscape7Upgrade ja-mozillafirebird-gtk2Upgrade mozilla-firebirdUpgrade ja-linux-netscapeUpgrade mozillaUpgrade ru-linux-mozillafirebirdUpgrade el-linux-mozillafirebirdUpgrade linux-mozillafirebirdUpgrade mozilla-thunderbirdUpgrade linux-mozilla-develUpgrade firefoxUpgrade netscape7 | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-thunderbirdUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefoxUpgrade mozilla-browserUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-nb | Nov 8, 2024 | Jul 13, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub