Description
GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.
References (47)
Core 47
Core References
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2007-0077.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0108.html
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-428-1
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:050
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0078.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8757
Issue Tracking x_refsource_misc
https://bugzilla.mozilla.org/show_bug.cgi?id=361298
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24395
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24328
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1103
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1081
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461336/100/0/threaded
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200703-04.xml
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml
Vendor Advisory vendor-advisory
x_refsource_slackware
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24384
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1017700
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24457
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24343
Vendor Advisory vendor-advisory
x_refsource_hp
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0718
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24650
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24320
Various Sources vendor-advisory
x_refsource_suse
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0083
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461809/100/0/threaded
Vendor Advisory vendor-advisory
x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24293
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24238
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24393
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24342
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24287
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/22694
Mailing List vendor-advisory
x_refsource_fedora
http://fedoranews.org/cms/node/2713
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0097.html
Mailing List vendor-advisory
x_refsource_fedora
http://fedoranews.org/cms/node/2728
Vendor Advisory vendor-advisory
x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24205
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24333
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24290
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24455
Vendor Advisory vendor-advisory
x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/32109
Vendor Advisory vendor-advisory
x_refsource_slackware
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0079.html
Patch, Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2007/mfsa2007-04.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24437
Scores
EPSS
0.0155
EPSS Percentile
72.3%
Details
Status
published
Products (39)
mozilla/firefox
0.8
mozilla/firefox
0.9.1
mozilla/firefox
0.9.2
mozilla/firefox
0.9.3
mozilla/firefox
0.9_rc
mozilla/firefox
0.10
mozilla/firefox
0.10.1
mozilla/firefox
1.0
mozilla/firefox
1.0.1
mozilla/firefox
1.0.2
... and 29 more
Published
Feb 26, 2007
Tracked Since
Feb 18, 2026