Oval Definition:	oval:org.mitre.oval:def:11433
Revision Date: 2013-04-29 Version: 12 Title: Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other attacks. Description: Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other attacks. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-2871 Platform(s): CentOS Linux 3 CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.1.el3 OR seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3 OR seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3 OR seamonkey is earlier than 0:1.0.9-0.1.el3 OR seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3 OR seamonkey-mail is earlier than 0:1.0.9-0.1.el3 OR seamonkey-chat is earlier than 0:1.0.9-0.1.el3 OR seamonkey-devel is earlier than 0:1.0.9-0.1.el3 OR seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3 OR seamonkey-nss is earlier than 0:1.0.9-0.1.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section devhelp-devel is earlier than 0:0.10-0.8.el4 OR seamonkey-nspr is earlier than 0:1.0.9-2.el4 OR seamonkey-js-debugger is earlier than 0:1.0.9-2.el4 OR thunderbird is earlier than 0:1.5.0.12-0.1.el4 OR seamonkey-nss-devel is earlier than 0:1.0.9-2.el4 OR seamonkey is earlier than 0:1.0.9-2.el4 OR seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4 OR devhelp is earlier than 0:0.10-0.8.el4 OR firefox is earlier than 0:1.5.0.12-0.1.el4 OR seamonkey-mail is earlier than 0:1.0.9-2.el4 OR seamonkey-chat is earlier than 0:1.0.9-2.el4 OR seamonkey-nss is earlier than 0:1.0.9-2.el4 OR seamonkey-devel is earlier than 0:1.0.9-2.el4 OR seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-1.el5 OR yelp is earlier than 0:2.16.0-15.el5 OR devhelp-devel is earlier than 0:0.12-11.el5 OR devhelp is earlier than 0:0.12-11.el5 OR firefox is earlier than 0:1.5.0.12-1.el5 OR thunderbird is earlier than 0:1.5.0.12-1.el5
BACK