Oval Definition:oval:org.mitre.oval:def:1313
Revision Date:2013-04-08Version:7
Title:RHE4 Firefox and Mozilla Javascript Dialog Box Spoofing
Description:Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-2268
Platform(s):Red Hat Enterprise Linux 4
Product(s):mozilla
Definition Synopsis
  • Software section
  • Red Hat Enterprise 4 is installed
  • AND mozilla RPM is earlier than 37:1.7.10-1.4.1
  • AND Configuration section
  • /usr/bin/mozilla is executable
  • BACK