CVE-2005-2707
First published: Fri Sep 23 2005(Updated: )
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | =1.0.2 | |
| Mozilla Firefox | <=1.0.6 | |
| Mozilla Mozilla Suite | <=1.7.11 | |
| Mozilla Mozilla Suite | =1.7.10 | |
| Mozilla Firefox | =1.0.4 | |
| Mozilla Mozilla Suite | =1.7.8 | |
| Mozilla Firefox | =1.0 | |
| Mozilla Firefox | =1.0.1 | |
| Mozilla Firefox | =1.0.3 | |
| Mozilla Mozilla Suite | =1.7.7 | |
| Mozilla Mozilla Suite | =1.7.6 | |
| Mozilla Firefox | =1.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.redhat.com/support/errata/RHSA-2005-785.html
- http://securitytracker.com/id?1014954
- http://www.mozilla.org/security/announce/mfsa2005-59.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:169
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:170
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:174
- http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html
- http://www.redhat.com/support/errata/RHSA-2005-789.html
- http://www.securityfocus.com/bid/14919
- http://secunia.com/advisories/16911
- http://secunia.com/advisories/16917
- http://www.debian.org/security/2005/dsa-868
- http://www.redhat.com/support/errata/RHSA-2005-791.html
- http://www.securityfocus.com/bid/15495
- http://secunia.com/advisories/17042
- http://secunia.com/advisories/17090
- http://secunia.com/advisories/17149
- http://secunia.com/advisories/17284
- http://www.debian.org/security/2005/dsa-838
- http://www.debian.org/security/2005/dsa-866
- http://secunia.com/advisories/17026
- http://secunia.com/advisories/17263
- http://www.novell.com/linux/security/advisories/2005_58_mozilla.html
- http://secunia.com/advisories/16977
- http://secunia.com/advisories/17014
- http://secunia.com/advisories/19823
- http://www.vupen.com/english/advisories/2005/1824
- http://www.novell.com/linux/security/advisories/2006_04_25.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22380
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1197
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11130
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/remedy
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/mozilla
- canonical/mozilla firefox
- version/mozilla firefox/1.0.2
- version/mozilla firefox/1.0.6
- canonical/mozilla mozilla suite
- version/mozilla mozilla suite/1.7.11
- version/mozilla mozilla suite/1.7.10
- version/mozilla firefox/1.0.4
- version/mozilla mozilla suite/1.7.8
- version/mozilla firefox/1.0
- version/mozilla firefox/1.0.1
- version/mozilla firefox/1.0.3
- version/mozilla mozilla suite/1.7.7
- version/mozilla mozilla suite/1.7.6
- version/mozilla firefox/1.0.5