CVEvulnerability

CVE-2005-2707

5.0 MEDIUM Published 2005-09-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-09-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.

Affected configurations

• mozilla firefox (<= 1.0.6) • mozilla firefox 1.0 • mozilla firefox 1.0.1 • mozilla firefox 1.0.2 • mozilla firefox 1.0.3 • mozilla firefox 1.0.4 • mozilla firefox 1.0.5 • mozilla mozilla suite (<= 1.7.11) • mozilla mozilla suite 1.7.6 • mozilla mozilla suite 1.7.7 • mozilla mozilla suite 1.7.8 • mozilla mozilla suite 1.7.10

References