Lucene search
Mozilla FoundationMFSA2005-13HistoryFeb 24, 2005 - 12:00 a.m.
Window Injection Spoofing — Mozilla
2005-02-2400:00:00
Mozilla Foundation
www.mozilla.org
18
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
75.4%
A website can inject content into a popup opened by another site if the target name of the popup window is known. An attacker who knows you are going to visit that other site could spoof the contents of the popup.
Affected configurations
Node
mozillafirefoxRange<1.0.1
ORmozillamozilla_suiteRange<1.7.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | mozilla_suite | * | cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2004-1156
2004-12-10 05:00:00
nvd
nvd
CVE-2004-1156
2004-12-31 05:00:00
ubuntucve
ubuntucve
CVE-2004-1156
2004-12-31 00:00:00
cve
cve
CVE-2004-1156
2004-12-31 05:00:00
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200503-30 (Mozilla)
2008-09-24 00:00:00
nessus
nessus
FreeBSD : web browsers -- window injection vulnerabilities (b0911985-6e2a-11d9-9557-000a95bc6fae)
2005-07-13 00:00:00
Fedora Core 2 : mozilla-1.7.6-1.2.2 (2005-248)
2005-05-19 00:00:00
Fedora Core 3 : mozilla-1.7.6-1.3.2 (2005-249)
2005-09-12 00:00:00
freebsd
freebsd
web browsers -- window injection vulnerabilities
2004-12-08 00:00:00
redhat
redhat
(RHSA-2005:335) mozilla security update
2005-03-23 00:00:00
(RHSA-2005:176) firefox security update
2005-03-01 00:00:00
(RHSA-2005:384) Mozilla security update
2005-04-28 00:00:00
gentoo
gentoo
Mozilla Firefox: Various vulnerabilities
2005-03-04 00:00:00
Mozilla Suite: Multiple vulnerabilities
2005-03-25 00:00:00
centos
centos
mozilla security update
2005-04-29 03:28:26
galeon, mozilla security update
2005-04-30 07:03:15
ubuntu
ubuntu
Ubuntu 4.10 update for Firefox vulnerabilities
2005-07-28 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
75.4%
Related for MFSA2005-13