Lucene search
Mozilla FoundationMFSA2007-04HistoryFeb 23, 2007 - 12:00 a.m.
Spoofing using custom cursor and CSS3 hotspot — Mozilla
2007-02-2300:00:00
Mozilla Foundation
www.mozilla.org
15
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.332 Low
EPSS
Percentile
97.0%
David Eckel reported that browser UI elements–such as the host name and security indicators–could be spoofed by using a large, mostly transparent, custom cursor and adjusting the CSS3 hotspot property so that the visible part of the cursor floated outside the browser content area.
Related
veracode
veracode
Clickjacking
2020-04-10 00:12:51
ubuntucve
ubuntucve
CVE-2007-0779
2007-02-26 00:00:00
prion
prion
Code injection
2007-02-26 20:28:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-04
2007-02-27 00:00:00
Multiple Mozilla Firefox / Thunderbird / Seamonkey vulnerabilities
2007-03-06 00:00:00
cve
cve
CVE-2007-0779
2007-02-26 20:28:00
openvas
openvas
Fedora Update for firefox FEDORA-2007-281
2009-02-27 00:00:00
Fedora Update for firefox FEDORA-2007-293
2009-02-27 00:00:00
Gentoo Security Advisory GLSA 200703-04 (mozilla-firefox)
2008-09-24 00:00:00
nessus
nessus
GLSA-200703-08 : SeaMonkey: Multiple vulnerabilities
2007-03-12 00:00:00
GLSA-200703-04 : Mozilla Firefox: Multiple vulnerabilities
2007-03-06 00:00:00
Fedora Core 5 : firefox-1.5.0.10-1.fc5 (2007-281)
2007-02-27 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2007-03-02 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-03-09 00:00:00
redhat
redhat
(RHSA-2007:0108) Critical: thunderbird security update
2007-03-13 00:00:00
(RHSA-2007:0097) Critical: firefox security update
2007-03-14 00:00:00
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2007-02-23 00:00:00
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: Firefox security update
2007-02-24 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
ubuntu
ubuntu
Firefox regression
2007-03-02 00:00:00
Firefox vulnerabilities
2007-03-01 00:00:00
centos
centos
firefox security update
2007-02-24 13:53:25
thunderbird security update
2007-03-04 11:06:21
seamonkey security update
2007-02-25 05:59:36
suse
suse
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.332 Low
EPSS
Percentile
97.0%
Related for MFSA2007-04