Description (CNA)
Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.mozilla.org/security/announce/mfsa2005-16.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18864
- http://secunia.com/advisories/13786
- http://www.mikx.de/firespoofing/
- https://bugzilla.mozilla.org/show_bug.cgi?id=260560
- http://marc.info/?l=bugtraq&m=110547286002188&w=2
- http://www.securityfocus.com/bid/12234
- http://www.redhat.com/support/errata/RHSA-2005-176.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042
- http://www.redhat.com/support/errata/RHSA-2005-384.html
- http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039
- http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml
- http://www.mikx.de/index.php?p=7
ADP enrichment
No English description supplied.
- http://www.mozilla.org/security/announce/mfsa2005-16.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18864
- http://secunia.com/advisories/13786
- http://www.mikx.de/firespoofing/
- https://bugzilla.mozilla.org/show_bug.cgi?id=260560
- http://marc.info/?l=bugtraq&m=110547286002188&w=2
- http://www.securityfocus.com/bid/12234
- http://www.redhat.com/support/errata/RHSA-2005-176.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042
- http://www.redhat.com/support/errata/RHSA-2005-384.html
- http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039
- http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml
- http://www.mikx.de/index.php?p=7