[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-0779Date: (C)2007-02-26   (M)2023-12-22


GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.4
Exploit Score: 10.0
Impact Score: 4.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: NONE
  
Reference:
SECTRACK-1017700
20070202-01-P
http://www.securityfocus.com/archive/1/461336/100/0/threaded
20070301-01-P
http://www.securityfocus.com/archive/1/461809/100/0/threaded
BID-22694
SECUNIA-24205
SECUNIA-24238
SECUNIA-24287
SECUNIA-24290
SECUNIA-24293
SECUNIA-24320
SECUNIA-24328
SECUNIA-24333
SECUNIA-24342
SECUNIA-24343
SECUNIA-24384
SECUNIA-24393
SECUNIA-24395
SECUNIA-24437
SECUNIA-24455
SECUNIA-24457
SECUNIA-24650
OSVDB-32109
ADV-2007-0718
ADV-2008-0083
FEDORA-2007-281
FEDORA-2007-293
GLSA-200703-04
GLSA-200703-08
HPSBUX02153
MDKSA-2007:050
RHSA-2007:0077
RHSA-2007:0078
RHSA-2007:0079
RHSA-2007:0097
RHSA-2007:0108
SSA:2007-066-03
SSA:2007-066-05
SUSE-SA:2007:019
SUSE-SA:2007:022
USN-428-1
http://www.mozilla.org/security/announce/2007/mfsa2007-04.html
https://bugzilla.mozilla.org/show_bug.cgi?id=361298
https://issues.rpath.com/browse/RPL-1081
https://issues.rpath.com/browse/RPL-1103
oval:org.mitre.oval:def:8757

CPE    40
cpe:/a:mozilla:firefox:1.5.0.4
cpe:/a:mozilla:firefox:1.5.0.3
cpe:/a:mozilla:firefox:1.5:beta2
cpe:/a:mozilla:firefox:1.5.0.2
...

© SecPod Technologies