Lucene search

K
mozillaMozilla FoundationMFSA2008-11
HistoryFeb 07, 2008 - 12:00 a.m.

Web forgery overwrite with div overlay — Mozilla

2008-02-0700:00:00
Mozilla Foundation
www.mozilla.org
19

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.023 Low

EPSS

Percentile

89.6%

Security researchers Emil Ljungdahl and Lars-Olof Moilanen demonstrated that, in cases where the entire contents of a page are enclosed in a

with absolute positioning, a web forgery warning dialog won’t be displayed unless the user switches tabs away-from then back-to the forgery page.

CPENameOperatorVersion
firefoxlt2.0.0.12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.023 Low

EPSS

Percentile

89.6%