Description (CNA)
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/12188
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16837
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
- http://www.redhat.com/support/errata/RHSA-2004-421.html
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
- http://marc.info/?l=bugtraq&m=109900315219363&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2418
- http://www.securityfocus.com/bid/15495
- http://www.kb.cert.org/vuls/id/262350
- http://www.securityfocus.com/bid/10832
- http://bugzilla.mozilla.org/show_bug.cgi?id=244965
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9419
ADP enrichment
No English description supplied.
- http://secunia.com/advisories/12188
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16837
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
- http://www.redhat.com/support/errata/RHSA-2004-421.html
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
- http://marc.info/?l=bugtraq&m=109900315219363&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2418
- http://www.securityfocus.com/bid/15495
- http://www.kb.cert.org/vuls/id/262350
- http://www.securityfocus.com/bid/10832
- http://bugzilla.mozilla.org/show_bug.cgi?id=244965
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9419