CVE-2006-1740: Low severity Mozilla Firefox vulnerability
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1740?
CVE-2006-1740 is classified as a moderate severity vulnerability that can lead to secure site indicator spoofing.
How do I fix CVE-2006-1740?
To fix CVE-2006-1740, upgrade to a version of Mozilla Firefox or Mozilla Suite that is 1.5 or newer, or 1.7.13 for Suite.
Which versions are affected by CVE-2006-1740?
CVE-2006-1740 affects Mozilla Firefox versions prior to 1.5 and 1.0.x versions before 1.0.8, as well as specific versions of Mozilla Suite and SeaMonkey.
What type of attack does CVE-2006-1740 facilitate?
CVE-2006-1740 facilitates attacks where remote attackers can spoof secure site indicators, such as the locked icon, to mislead users.
Is there a workaround for CVE-2006-1740?
No specific workaround is provided for CVE-2006-1740; the best mitigation is to update to a non-vulnerable version.