6.4

CVE-2007-0779

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version0.8
Mozilla ≫ Firefox Version0.9.1
Mozilla ≫ Firefox Version0.9.2
Mozilla ≫ Firefox Version0.9.3
Mozilla ≫ Firefox Version0.9_rc
Mozilla ≫ Firefox Version0.10
Mozilla ≫ Firefox Version0.10.1
Mozilla ≫ Firefox Version1.0
Mozilla ≫ Firefox Version1.0.1
Mozilla ≫ Firefox Version1.0.2
Mozilla ≫ Firefox Version1.0.3
Mozilla ≫ Firefox Version1.0.4
Mozilla ≫ Firefox Version1.0.5
Mozilla ≫ Firefox Version1.0.6
Mozilla ≫ Firefox Version1.0.7
Mozilla ≫ Firefox Version1.0.8
Mozilla ≫ Firefox Version1.5
Mozilla ≫ Firefox Version1.5 Updatebeta1
Mozilla ≫ Firefox Version1.5 Updatebeta2
Mozilla ≫ Firefox Version1.5.0.1
Mozilla ≫ Firefox Version1.5.0.2
Mozilla ≫ Firefox Version1.5.0.3
Mozilla ≫ Firefox Version1.5.0.4
Mozilla ≫ Firefox Version1.5.0.5
Mozilla ≫ Firefox Version1.5.0.6
Mozilla ≫ Firefox Version1.5.0.7
Mozilla ≫ Firefox Version1.5.0.8
Mozilla ≫ Firefox Version1.5.0.9
Mozilla ≫ Firefox Version1.5.6
Mozilla ≫ Firefox Version1.5.8
Mozilla ≫ Firefox Version2.0
Mozilla ≫ Firefox Version2.0 Updatebeta_1
Mozilla ≫ Firefox Version2.0 Updaterc2
Mozilla ≫ Firefox Version2.0 Updaterc3
Mozilla ≫ Firefox Version2.0.0.1
Mozilla ≫ Seamonkey Version1.0
Mozilla ≫ Seamonkey Version1.0 Editionalpha
Mozilla ≫ Seamonkey Version1.0 Editiondev
Mozilla ≫ Seamonkey Version1.0 Updatebeta
Mozilla ≫ Seamonkey Version1.0.1
Mozilla ≫ Seamonkey Version1.0.2
Mozilla ≫ Seamonkey Version1.0.3
Mozilla ≫ Seamonkey Version1.0.4
Mozilla ≫ Seamonkey Version1.0.5
Mozilla ≫ Seamonkey Version1.0.6
Mozilla ≫ Seamonkey Version1.0.7
Mozilla ≫ Seamonkey Version1.0.99
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.55% 0.718
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.vupen.com/english/advisories/2008/0083
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
http://fedoranews.org/cms/node/2713
http://fedoranews.org/cms/node/2728
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
http://rhn.redhat.com/errata/RHSA-2007-0077.html
http://secunia.com/advisories/24205
Vendor Advisory
http://secunia.com/advisories/24238
Vendor Advisory
http://secunia.com/advisories/24287
Vendor Advisory
http://secunia.com/advisories/24290
Vendor Advisory
http://secunia.com/advisories/24293
Vendor Advisory
http://secunia.com/advisories/24320
Vendor Advisory
http://secunia.com/advisories/24328
Vendor Advisory
http://secunia.com/advisories/24333
Vendor Advisory
http://secunia.com/advisories/24342
Vendor Advisory
http://secunia.com/advisories/24343
Vendor Advisory
http://secunia.com/advisories/24384
Vendor Advisory
http://secunia.com/advisories/24393
Vendor Advisory
http://secunia.com/advisories/24395
Vendor Advisory
http://secunia.com/advisories/24437
Vendor Advisory
http://secunia.com/advisories/24457
Vendor Advisory
http://secunia.com/advisories/24650
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200703-04.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:050
http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
http://www.redhat.com/support/errata/RHSA-2007-0078.html
http://www.redhat.com/support/errata/RHSA-2007-0079.html
http://www.redhat.com/support/errata/RHSA-2007-0097.html
http://www.redhat.com/support/errata/RHSA-2007-0108.html
http://www.securityfocus.com/archive/1/461336/100/0/threaded
http://www.securityfocus.com/archive/1/461809/100/0/threaded
http://www.securityfocus.com/bid/22694
Patch
http://www.ubuntu.com/usn/usn-428-1
http://www.vupen.com/english/advisories/2007/0718
https://issues.rpath.com/browse/RPL-1081
https://issues.rpath.com/browse/RPL-1103
http://secunia.com/advisories/24455
Vendor Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
http://osvdb.org/32109
http://www.mozilla.org/security/announce/2007/mfsa2007-04.html
Patch
Vendor Advisory
http://www.securitytracker.com/id?1017700
https://bugzilla.mozilla.org/show_bug.cgi?id=361298
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8757