Description
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute.
References (50)
Core 50
Core References
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482876/100/200/threaded
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27414
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1858
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1018837
Vendor Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/535-1/
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/349217
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0980.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0981.html
Issue Tracking x_refsource_misc
https://bugzilla.mozilla.org/show_bug.cgi?id=391043
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27403
Patch x_refsource_confirm
http://www.mozilla.org/security/announce/2007/mfsa2007-33.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3587
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482925/100/0/threaded
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27360
Vendor Advisory vendor-advisory
x_refsource_hp
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27298
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27315
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27327
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3544
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27276
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2007/dsa-1401
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2007/dsa-1392
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27383
Vendor Advisory vendor-advisory
x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_57_mozilla.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27356
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0083
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27387
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27336
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2007/dsa-1396
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27425
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28398
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27311
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27325
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/37286
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27665
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0979.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27335
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27480
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27680
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26132
Vendor Advisory x_refsource_confirm
http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
Vendor Advisory vendor-advisory
x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482932/100/200/threaded
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-536-1
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11482
Scores
EPSS
0.0302
EPSS Percentile
85.9%
Details
CWE
CWE-16
Status
published
Products (2)
mozilla/firefox
< 2.0.0.7
mozilla/seamonkey
< 1.1.4
Published
Oct 21, 2007
Tracked Since
Feb 18, 2026