Rapid7 Vulnerability & Exploit Database

MFSA2007-17 Firefox: XUL Popup Spoofing (CVE-2007-2871)

Back to Search

MFSA2007-17 Firefox: XUL Popup Spoofing (CVE-2007-2871)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
05/31/2007
Created
07/25/2018
Added
06/14/2012
Modified
05/27/2016

Description

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other attacks.

Solution(s)

  • mozilla-firefox-upgrade-1_5_0_12
  • mozilla-firefox-upgrade-2_0_0_4

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;