CVE-2004-0718

2004-07-2704:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0718

mozilla

firebird

firefox

netscape

frame injection vulnerability

web browser security

web site spoofing

information security

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.012

Percentile

84.9%

JSON

The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

Affected configurations

NVD

Node

firebirdsqlfirebirdMatch0.7

mozillamozillaMatch1.6

netscapenavigatorMatch7.1

VendorProductVersionCPE
firebirdsqlfirebird0.7cpe:/a:firebirdsql:firebird:0.7:::
netscapenavigator7.1cpe:/a:netscape:navigator:7.1:::
mozillamozilla1.6cpe:/a:mozilla:mozilla:1.6:::

Vendor	Product	Version	CPE
firebirdsql	firebird	0.7	cpe:/a:firebirdsql:firebird:0.7:::
netscape	navigator	7.1	cpe:/a:netscape:navigator:7.1:::
mozilla	mozilla	1.6	cpe:/a:mozilla:mozilla:1.6:::