Oval Definition:oval:org.mitre.oval:def:100005
Revision Date:2007-05-09Version:6
Title:Firefox and Mozilla Javascript Dialog Box Spoofing
Description:Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-2268
Platform(s):Microsoft Windows 2000
Microsoft Windows NT
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):mozilla
Definition Synopsis
  • Mozilla Firefox version 1.0.4 or earlier is installed
  • Firefox version 1.0.4 or earlier is installed
  • AND Mozilla Firefox version 1.0.4 or earlier is installed
  • OR Mozilla Suite version 1.7.8 or earlier is installed
  • Mozilla Suite version 1.7.8 or earlier is installed
  • AND Mozilla Suite version 1.7.8 or earlier is installed
  • BACK