CVE-2005-2707

Firefox < 1.0.7 and Mozilla Suite < 1.7.12 - Unauthenticated Spoofing via Window UI Removal

Title source: llm
STIX 2.1

Description

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.

References (32)

Core 32
Core References
Various Sources vendor-advisory x_refsource_sco
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11130
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/22380
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:174
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:170
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:169
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-868
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/1824
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19823
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14919
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15495
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014954
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-789.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17026
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-791.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17042
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-866
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17284
Various Sources x_refsource_confirm
http://www.mozilla.org/security/announce/mfsa2005-59.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17149
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17263
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16917
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-838
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17014
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1197
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-785.html
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2005_58_mozilla.html
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_04_25.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17090
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16911
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16977

Scores

EPSS 0.0179
EPSS Percentile 76.0%

Details

Status published
Products (12)
mozilla/firefox 1.0
mozilla/firefox 1.0.1
mozilla/firefox 1.0.2
mozilla/firefox 1.0.3
mozilla/firefox 1.0.4
mozilla/firefox 1.0.5
mozilla/firefox < 1.0.6
mozilla/mozilla_suite 1.7.6
mozilla/mozilla_suite 1.7.7
mozilla/mozilla_suite 1.7.8
... and 2 more
Published Sep 23, 2005
Tracked Since Feb 18, 2026