CVE-2005-2707 Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoof...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 1.0.6 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla suite | <= 1.7.11 | No fix listed |
| mozilla suite | = 1.7.6 | No fix listed |
| mozilla suite | = 1.7.7 | No fix listed |
| mozilla suite | = 1.7.8 | No fix listed |
| mozilla suite | = 1.7.10 | No fix listed |
References
- 16911 third-party-advisory
- 16917 third-party-advisory
- 16977 third-party-advisory
- 17014 third-party-advisory
- 17026 third-party-advisory
- 17042 third-party-advisory
- 17090 third-party-advisory
- 17149 third-party-advisory
- 17263 third-party-advisory
- 17284 third-party-advisory
- 19823 third-party-advisory
- 1014954 vdb-entry
- DSA-838 vendor-advisory
- DSA-866 vendor-advisory
- DSA-868 vendor-advisory
- MDKSA-2005:169 vendor-advisory
- MDKSA-2005:170 vendor-advisory
- MDKSA-2005:174 vendor-advisory
- www.mozilla.org
- SUSE-SA:2005:058 vendor-advisory
- SUSE-SA:2006:022 vendor-advisory
- FLSA-2006:168375 vendor-advisory
- RHSA-2005:785 patch vendor-advisory
- RHSA-2005:789 vendor-advisory
- RHSA-2005:791 vendor-advisory
- 14919 vdb-entry
- 15495 vdb-entry
- ADV-2005-1824 vdb-entry
- mozilla-chrome-window-spoofing(22380) vdb-entry
- oval:org.mitre.oval:def:11130 signature vdb-entry
- oval:org.mitre.oval:def:1197 signature vdb-entry