Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other attacks.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | May 31, 2007 |
| Mfsa2007 17 | — | Upgrade to Mozilla Firefox version 1.5.0.12Upgrade to Mozilla Firefox version 2.0.0.4 | Jun 14, 2012 | May 31, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.9Upgrade to Mozilla SeaMonkey version 1.1.2 | Feb 3, 2012 | May 31, 2007 |
| Oracle_linux | — | Upgrade devhelp-develUpgrade devhelpUpgrade firefoxUpgrade yelpUpgrade firefox-devel | Oct 16, 2024 | Jun 1, 2007 |
| Suse | — | Upgrade mozilla-venkmanUpgrade mozilla-deatUpgrade mozilla-calendarUpgrade mozilla-dom-inspectorUpgrade MozillaThunderbird-translationsUpgrade MozillaFirefoxUpgrade seamonkey-dom-inspectorUpgrade mozilla-ircUpgrade MozillaFirefox-translationsUpgrade mozilla-huUpgrade mozilla-develUpgrade seamonkey-ircUpgrade mozilla-mailUpgrade MozillaThunderbirdUpgrade seamonkey-venkmanUpgrade seamonkeyUpgrade seamonkey-mailUpgrade mozilla-csUpgrade suse-releaseUpgrade seamonkey-spellcheckerUpgrade mozilla | Feb 17, 2015 | May 31, 2007 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jun 1, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub