Lucene search
Mozilla FoundationMFSA2007-04HistoryFeb 23, 2007 - 12:00 a.m.
Spoofing using custom cursor and CSS3 hotspot — Mozilla
2007-02-2300:00:00
Mozilla Foundation
www.mozilla.org
19
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.327
Percentile
97.1%
David Eckel reported that browser UI elements–such as the host name and security indicators–could be spoofed by using a large, mostly transparent, custom cursor and adjusting the CSS3 hotspot property so that the visible part of the cursor floated outside the browser content area.
Affected configurations
Node
mozillafirefoxRange<1.5.0.10
ORmozillafirefoxRange<2.0.0.2
ORmozillaseamonkeyRange<1.0.8
Related
veracode
veracode
Clickjacking
2020-04-10 00:12:51
ubuntucve
ubuntucve
CVE-2007-0779
2007-02-26 00:00:00
prion
prion
Code injection
2007-02-26 20:28:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-04
2007-02-27 00:00:00
Multiple Mozilla Firefox / Thunderbird / Seamonkey vulnerabilities
2007-03-06 00:00:00
cvelist
cvelist
CVE-2007-0779
2007-02-26 20:00:00
cve
cve
CVE-2007-0779
2007-02-26 20:28:00
nvd
nvd
CVE-2007-0779
2007-02-26 20:28:00
openvas
openvas
Fedora Update for firefox FEDORA-2007-293
2009-02-27 00:00:00
Fedora Update for firefox FEDORA-2007-281
2009-02-27 00:00:00
Gentoo Security Advisory GLSA 200703-04 (mozilla-firefox)
2008-09-24 00:00:00
nessus
nessus
GLSA-200703-08 : SeaMonkey: Multiple vulnerabilities
2007-03-12 00:00:00
GLSA-200703-04 : Mozilla Firefox: Multiple vulnerabilities
2007-03-06 00:00:00
Slackware 10.2 / 11.0 : mozilla-firefox (SSA:2007-066-03)
2007-03-12 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2007-03-02 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-03-09 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
redhat
redhat
(RHSA-2007:0097) Critical: firefox security update
2007-03-14 00:00:00
(RHSA-2007:0108) Critical: thunderbird security update
2007-03-13 00:00:00
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: Firefox security update
2007-02-24 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2007-03-01 00:00:00
Firefox regression
2007-03-02 00:00:00
centos
centos
thunderbird security update
2007-03-04 11:06:21
seamonkey security update
2007-03-16 07:21:16
firefox security update
2007-02-24 13:53:25
suse
suse
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.327
Percentile
97.1%
Related for MFSA2007-04