Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | May 31, 2007 |
| Mfsa2007 17 | — | Upgrade to Mozilla Firefox version 1.5.0.12Upgrade to Mozilla Firefox version 2.0.0.4 | Jun 14, 2012 | May 31, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.2Upgrade to Mozilla SeaMonkey version 1.0.9 | Feb 3, 2012 | May 31, 2007 |
| Oracle_linux | — | Upgrade firefoxUpgrade yelpUpgrade devhelpUpgrade devhelp-develUpgrade firefox-devel | Oct 16, 2024 | Jun 1, 2007 |
| Suse | — | Upgrade mozilla-deatUpgrade seamonkey-ircUpgrade seamonkey-dom-inspectorUpgrade MozillaThunderbird-translationsUpgrade mozilla-ircUpgrade mozilla-huUpgrade mozilla-venkmanUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade mozilla-dom-inspectorUpgrade mozilla-develUpgrade mozilla-calendarUpgrade mozilla-csUpgrade suse-releaseUpgrade seamonkey-venkmanUpgrade seamonkeyUpgrade mozillaUpgrade MozillaThunderbirdUpgrade seamonkey-mailUpgrade mozilla-mailUpgrade seamonkey-spellchecker | Feb 17, 2015 | May 31, 2007 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jun 1, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub