Oval Definition:
oval:org.mitre.oval:def:100034
Revision Date
:
2007-05-09
Version
:
5
Title
:
Mozilla HTTP auth Prompt Tab Spoofing
Description
:
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2005-0584
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows NT
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s)
:
mozilla
Mozilla Firefox
Definition Synopsis
Mozilla Firefox version 1.0 or earlier is installed
Firefox version 1.0 or earlier is installed
AND
Mozilla Firefox version 1.0 or earlier is installed
OR
Mozilla Suite version 1.7.5 or earlier is installed
Mozilla Suite version 1.7.5 or earlier is installed
AND
Mozilla Suite version 1.7.5 or earlier is installed
BACK