Mozilla status elements can be disabled via JavaScript

🗓️ 17 Dec 2004 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 33 Views

Mozilla status elements can be disabled via JavaScript, enabling spoofed dialogs by attackers.

Reporter	Title	Published	Views	Family All 39
Tenable Nessus	Mozilla Firefox < 1.7.1 SSL Redirect Spoofing	20 Aug 200400:00	–	nessus
Tenable Nessus	Mozilla Firefox < 1.7.2 Non-FQDN SSL Certificate Spoofing	20 Aug 200400:00	–	nessus
Tenable Nessus	Mozilla Firefox < 1.7.1 Cross-Domain Frame Loading Vulnerability (deprecated)	20 Aug 200400:00	–	nessus
Tenable Nessus	Mozilla Firefox < 1.7.1 / Thunderbird < 0.7.1 POP3 Remote Heap Overflow (deprecated)	20 Aug 200400:00	–	nessus
Tenable Nessus	Mozilla Firefox XML User Interface Language Browser Interface Spoofing (deprecated)	20 Aug 200400:00	–	nessus
Tenable Nessus	Mozilla Firefox Input Type HTML Tag Unauthorized Access (deprecated)	18 Aug 200400:00	–	nessus
Tenable Nessus	Microsoft Media Player Version 9 PNG Multiple Vulnerabilities (deprecated)	8 Feb 200500:00	–	nessus
Tenable Nessus	MSN Messenger < 6.2.0205 PNG File Remote Overflow (deprecated)	8 Feb 200500:00	–	nessus
Tenable Nessus	Mozilla Firefox < 1.0.1 Multiple Vulnerabilities	25 Feb 200500:00	–	nessus
Tenable Nessus	Mozilla Firefox < 1.7.6 Multiple Vulnerabilities	4 Mar 200500:00	–	nessus

Source	Link
secunia	www.secunia.com/advisories/12188/
securityfocus	www.securityfocus.com/bid/10832
xforce	www.xforce.iss.net/xforce/xfdb/16837
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi

22 Dec 2004 15:05Current

5.5Medium risk

Vulners AI Score5.5

CVSS 210

EPSS0.04294

mozilla browser status elements javascript spoofed dialogs security threat sensitive information xul interface.